Convert keys (OpenSSL to OpenSSH)

Ben Hacker Jr strbenjr at
Wed Apr 13 23:12:42 EST 2005


You are instructing me to: 

1. Generate a keyset using ssh-keygen.

2. Use "Openssl req" to generate the Cert. request using the keys from ssh-keygen.

3. Submit this new cert request to my PKI for signing.


Any extra bits I need to be careful about??


-----Original Message-----
From: Damien Miller <djm at>
Date: Wed, 13 Apr 2005 22:47:15 
To:Ben Hacker Jr <strbenjr at>
Cc:Darren Tucker <dtucker at>, openssh-unix-dev at
Subject: Re: Convert keys (OpenSSL to OpenSSH)

Ben Hacker Jr wrote:
> I want to keep my keys within my PKI.  I don't know how to do that using "ssh-keygen".  
> Can ssh-keygen generate a Certificate REQUEST??  PKCS10?

No, but "openssl req" can from an OpenSSH private key.


Ben Hacker Jr (On: mobile mail editor)

More information about the openssh-unix-dev mailing list