Skip to content

Support PKCS#5 AES-256-CBC encrypted private keys#50

Closed
nahuel wants to merge 1 commit into
TritonDataCenter:masterfrom
nahuel:patch-1
Closed

Support PKCS#5 AES-256-CBC encrypted private keys#50
nahuel wants to merge 1 commit into
TritonDataCenter:masterfrom
nahuel:patch-1

Conversation

@nahuel
Copy link
Copy Markdown
Contributor

@nahuel nahuel commented May 31, 2018

Add support for parsing PKCS#5 private keys encrypted with AES-256-CBC.
Previous to this fix only 128 bits keys were supported:

openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:6553 -outform pem -out key.priv
openssl rsa -aes128 -in key.priv -passout pass:pass -out key128.priv.crypt
openssl rsa -aes256 -in key.priv -passout pass:pass -out key256.priv.crypt
// this also worked ok before this patch:
sshpk.parsePrivateKey(fs.readFileSync('key128.priv.crypt'), 'pem', { passphrase : 'pass'})
// this not, but now is ok:
sshpk.parsePrivateKey(fs.readFileSync('key256.priv.crypt'), 'pem', { passphrase : 'pass'})  

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants