user-generate problem

[hawking.zn]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Hi:

if I　use user-generate to let the user generate the key pare. where can I find the private key? and can I  make the private key and the publick key certificate into PEM formate separately?

Thanks .

 

---

hawking.zn

2008-07-04

---

 

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

[Johan Eklund]

Hi,

User generated keys are by definition generated and stored at the client.

If you let the server generate a keystore instead (PKCS12) that the user
downloads, EJBCA can keep a copy of the store for key recovery.

Best Regards,
Johan Eklund

hawking.zn skrev:

> Hi:
> if I　use user-generate to let the user generate the key pare. where
> can I find the private key? and can I make the private key and the
> publick key certificate into PEM formate separately?
> Thanks .
> ------------------------------------------------------------------------
> hawking.zn
> 2008-07-04
> ------------------------------------------------------------------------
> **
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
> Studies have shown that voting for your favorite open source project,
> along with a healthy diet, reduces your potential for chronic lameness
> and boredom. Vote Now at http://www.sourceforge.net/community/cca08
> ------------------------------------------------------------------------
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejbca-develop@...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>  

--
PrimeKey Solutions offers a commercial EJBCA support subscription and training for EJBCA. Please see www.primekey.se or contact info@... for more information. http://download.primekey.se/documents/ejbca_subscription.pdf http://download.primekey.se/documents/ejbca_training.pdf





-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

[Johan Eklund]

If the user generates the pays it depends on the users application where
you find the private key. If you use Firefox it's stored in the firefox
profile, if you use IE it's stored in the windows registry, if you use
openssl it's stored as a PEM file in the users file system etc.

What format the private key is in is completely out of the control of
EJBCA (and the CA should not know it, it's PKI basics).
EJBCA will provide the certificate, the user application will handle the
private key.

/Tomas


hawking.zn wrote:

> Hi:
> if I　use user-generate to let the user generate the key pare. where can
> I find the private key? and can I  make the private key and the publick
> key certificate into PEM formate separately?
> Thanks .
>  
> ------------------------------------------------------------------------
> hawking.zn
> 2008-07-04
> ------------------------------------------------------------------------
> **
>
>
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
> Studies have shown that voting for your favorite open source project,
> along with a healthy diet, reduces your potential for chronic lameness
> and boredom. Vote Now at http://www.sourceforge.net/community/cca08
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejbca-develop@...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop