ECC keypair generation with password

[Kenneth Goldman]

> From: Viktor Dukhovni <openssl-users at dukhovni.org>
> >
> > In the script, I used this:
> >
> >     openssl ec -aes128 -passout pass:rrrr -in tmpecprivkeydec.pem
> -out tmpecprivkey.pem
>
> I try to avoid putting sensitive information in command-line arguments.
>
> If you're using "bash" (which has "printf" as a built-in) you could use:
>
>    -passout file:<(printf "rrrr\n")
>
> which does not create any processes with the password in the argument
vector.
> Example:
>
> $ openssl enc -aes128 -pass file:<(printf "rrrr\n") <<EOF | openssl
> enc -d -aes128 -pass file:<(printf "rrrr\n")
> > foobar
> > EOF
> foobar

Understood, but this is just for a regression test script.

Thanks.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190325/cef3ef5d/attachment-0001.html>