[openssl-users] Need help encrypting my ca.key

[Viktor Dukhovni]

On Mon, Jan 05, 2015 at 08:37:24PM -0600, jack seth wrote:
> I must be doing something wrong but I can't figure out what it is.  I am trying to encrypt my private ca key with this command
>  
> openssl rsa -in ca.key -out caencrypted.key -aes256
>  
> This works fine but the problem is I don't get the original key back when I decrypt it using this command
>  
> openssl rsa -in caencrypted.key -out catest.key
>  
>  
> catest.key doesn't have the same characters in it as ca.key when looking at them in a text editor.   What am I missing here? 		 	   		  

There are multiple possible key formats for the same key. Instead
compare the outputs of:

    $ umask 077
    $ openssl rsa -in ca.key -noout -text > txt1
    $ openssl rsa -in catest.key -noout -text > txt2
    $ diff txt1 txt2

-- 
	Viktor.