[openssl-users] problem with -aes256 and -outform der in cmmand

Robert Moskowitz rgm at htt-consult.com
Mon Aug 21 15:49:45 UTC 2017



On 08/21/2017 11:43 AM, Salz, Rich via openssl-users wrote:
> ➢ But if I use format=der I do not get prompted for the password.
>     
> DER does not support encryption.  The bug is that the command does not tell you this.
>
OK.  And why does DER not support encryption?  Actually, I can see 
working around this.  The CA certs private keys can be in PEM and 
everything else in DER.  Provided I can get all the inform and outforms 
right.

But for now I will 'live' with unencrypted DER CA private keys.

Bob


More information about the openssl-users mailing list