Convert keys (OpenSSL to OpenSSH)

Ben Hacker Jr strbenjr at yahoo.com
Wed Apr 13 23:12:42 EST 2005


So...

You are instructing me to: 

1. Generate a keyset using ssh-keygen.

2. Use "Openssl req" to generate the Cert. request using the keys from ssh-keygen.

3. Submit this new cert request to my PKI for signing.

Correct?

Any extra bits I need to be careful about??

-Ben

-----Original Message-----
From: Damien Miller <djm at mindrot.org>
Date: Wed, 13 Apr 2005 22:47:15 
To:Ben Hacker Jr <strbenjr at yahoo.com>
Cc:Darren Tucker <dtucker at zip.com.au>, openssh-unix-dev at mindrot.org
Subject: Re: Convert keys (OpenSSL to OpenSSH)

Ben Hacker Jr wrote:
> I want to keep my keys within my PKI.  I don't know how to do that using "ssh-keygen".  
> 
> Can ssh-keygen generate a Certificate REQUEST??  PKCS10?

No, but "openssl req" can from an OpenSSH private key.

-d

Ben Hacker Jr (On: mobile mail editor)




More information about the openssh-unix-dev mailing list