<html><body><p><tt><font size="2">> From: Viktor Dukhovni <openssl-users@dukhovni.org></font></tt><br><tt><font size="2">> > <br>> > In the script, I used this:<br>> > <br>> > openssl ec -aes128 -passout pass:rrrr -in tmpecprivkeydec.pem <br>> -out tmpecprivkey.pem<br>> <br>> I try to avoid putting sensitive information in command-line arguments.<br>> <br>> If you're using "bash" (which has "printf" as a built-in) you could use:<br>> <br>> -passout file:<(printf "rrrr\n")<br>> <br>> which does not create any processes with the password in the argument vector.<br>> Example:<br>> <br>> $ openssl enc -aes128 -pass file:<(printf "rrrr\n") <<EOF | openssl <br>> enc -d -aes128 -pass file:<(printf "rrrr\n")<br>> > foobar<br>> > EOF<br>> foobar<br></font></tt><br><tt><font size="2">Understood, but this is just for a regression test script.</font></tt><br><br><tt><font size="2">Thanks.</font></tt><BR>
</body></html>