3 ms·
I'm not terribly familiar with private key formats, but it appears to be encrypted (the `Proc-Type` and `DEK-Info` lines). Is the `localKeyID` the password used
by mooism2 15y ago
I'm not terribly familiar with private key formats, but it appears to be encrypted (the `Proc-Type` and `DEK-Info` lines). Is the `localKeyID` the password used to encrypt?
- wladimir 15y agoI'm not sure either. If it is encrypted, it would at least buy some time to replace all the certificates signed by this private key. Depending on the strength of the encryption key, obviously.
- pagekalisedown 15y agoJust by looking at the PEM's number of lines you can tell it's a 1024 bit key.
- wladimir 15y agoThat's the private key itself. I was somewhat unclear in my wording. We (I and the grandparent poster) were wondering if the private key was encrypted with a passphrase.
- pagekalisedown 15y agoGood point. The strength of the private key isn't relevant. Only the encryption used to protect the key.
- pagekalisedown 15y ago(1) Yes, the key is encrypted. (2) This is not necessarily the private key used to sign other certificates. (3) If they're lucky, this is a private key only used for their web server. OR, this key is an intermediate key. In which case they can invalidate it, create a new one, and reissue certificates for all the affected customers.
- deleted 15y ago[deleted]