OpenSSL CSR command line help required

OpenSSL CSR command line help required

am 06.03.2007 13:05:47 von astrosteve

Guys,

I need to produce a Certificate Signature Request using openSSL on Red
Hat Linux.
I've looked in the Linux man manual and found the command line to be
much more complicated than I thought. Does anyone have any experience
using openssl with Red Hat?? If so, what would be the command line
arguments to produce a SSL_RSA_EXPORT_WITH_RC4_40_MD5 CSR?? That is a
40 bit encryption with 512 bit keys.
I see that the openssl req command is related to CSR management but
I'm not sure which other parameters to use in what order.
I hope some of you guys can help.

Steve

Re: OpenSSL CSR command line help required

am 07.03.2007 23:23:10 von Bruce Stephens

"astrosteve" writes:

[...]

> If so, what would be the command line arguments to produce a
> SSL_RSA_EXPORT_WITH_RC4_40_MD5 CSR?? That is a 40 bit encryption
> with 512 bit keys.

You can generate a new RSA 512 bit key using "-newkey rsa:512".
(Alternatively use "openssl genrsa 512".) You can specify an MD5 hash
using the -md5 flag to req.

I'm not sure where you want RC4_40 to fit, though: CSR's aren't
encrypted. (Not that I know of, anyway.) (I don't see an easy way to
encrypt the private key with RC4_40---not that that would be a good
idea.)