ansaurus

Question

Answer 1

+1 A:

erickson 2010-09-07 16:47:06

Thanks for the reply. :)The tool other team is using has expectations of private keys documented as `PEM-encoded private key or a base64-encoded DER private key`i was trying for 2nd option.- .getEncoded() returns - DER form of ASN.1 (http://download.oracle.com/javase/6/docs/api/java/security/spec/PKCS8EncodedKeySpec.html)- then i further encode it to base64And still id does not work. Is there a way u could see? Is there a way to create private key directly to pem format?The restrictions are such that i have to create either of the form using java code only...

MiKu 2010-09-08 10:46:36

@MiKu - PEM uses base-64. The "mykey.pem" in the question is, of course, a PEM key. "DER" is used to indicate the binary form. But even when you distinguish binary from base-64, you still need to know the expected structure of the key: PKCS #8, or native OpenSSL. The DER or PEM is just a final layer of encoding. "base64-encoded DER" really doesn't make any sense. How would that be different from PEM? Did you try my code?

erickson 2010-09-08 13:18:22

i agree with what you are saying erikson. What i wanted to do was creating keys with java code such that the other tool can interpret it well. The default PKCS#8 structure was not that compatible with the tool. I got the work around with bouncy castle.`JDKKeyPairGenerator.RSA keyPairGen = new JDKKeyPairGenerator.RSA();keyPairGen.initialize(RSA_KEY_STRENGTH);KeyPair keyPair = keyPairGen.generateKeyPair();StringWriter stringWriter = new StringWriter();PEMWriter pemFormatWriter = new PEMWriter(stringWriter);pemFormatWriter.writeObject(keyPair.getPrivate());pemFormatWriter.close();`

MiKu 2010-09-09 09:46:43

Also, i dont really know whether "base64-encoded DER" equates to PEM or not. More likely you are right stating they are essentially same.Need to verify (for my personal confirmation) that by creating .dem with openssl and do a BASE64 encoding of it to check whether it equates to .pem equivalent of the key. From what you suggested, it seems that should be equal. :)Thanks for the help though. ASN.1 was a good read. :)

MiKu 2010-09-09 09:52:18

ansaurus

tags:

views:

answers:

Formatting RSA keys for OpenSSL in Java

Background

Questions

related questions