Man page - pkcs1-conv(1)

Packages contains this manual

Package: nettle-bin
apt-get install nettle-bin

Manuals in package:

Manual

PKCS1-CONV

NAME
SYNOPSIS
DESCRIPTION
OPTIONS
DIAGNOSTICS
EXAMPLES
SEE ALSO
AUTHOR
COPYRIGHT

NAME

pkcs1-conv - convert keys from PKCS#1 format to s-expression format

SYNOPSIS

pkcs1-conv [{ --private-rsa-key | --public-rsa-key | --public-key-info } [ --base-64 ]] < FILE

DESCRIPTION

This manual page documents briefly the pkcs1-conv command. This manual page was written for the Debian GNU/Linux distribution because the original program does not have a manual page.

pkcs1-conv converts private and public RSA keys from PKCS #1 format to sexp format.

OPTIONS

This program follows the usual GNU command line syntax, with long options starting with two dashes (‘-’).

By default pkcs1-conv expects a PEM-encapsulated RSA key on standard input, and will determine its type from the Pre-Encapsulation Boundary. To convert a DER-encoded (non PEM-encoded) key, one of the first three options below must be used:
--private-rsa-key

Specify that a DER-encoded RSAPrivateKey, as defined by PKCS #1 (RFC 3447), and described in section A.1.2 of its appendix A, is to be expected as input.

--public-rsa-key

Specify that a DER-encoded RSAPublicKey, as defined by PKCS #1 (RFC 3447), and described in section A.1.1 of its appendix A, is to be expected as input.

--public-key-info

Specify that a DER-encoded SubjectPublicKeyInfo, as defined by PKCS #6, and described in section A.1 of its appendix A, encapsulating an RSAPublicKey, is to be expected as input.

--base-64

Together with --private-rsa-key, --public-rsa-key, or --public-key-info, specify that base64 encoding is applied on top of the DER encoding.

-?, --help

Show summary of options (not implemented).

-V, --version

Show version of program.

DIAGNOSTICS

pkcs1-conv will complain and exit with a status of 1 if the input doesn’t match expectations. In PEM mode (when no option is used), if no PEM block is found, pkcs1-conv will output nothing but exit with a zero status.

EXAMPLES

$ openssl genrsa -out privkey.pem
$ pkcs1-conv < privkey.pem > privkey.sexp
$ openssl rsa -in privkey.pem -outform DER -out privkey.der
$ openssl rsa -in privkey.pem -outform DER -pubout -out pubkey.der
$ pkcs1-conv --rsa-private-key < privkey.der > privkey.sexp
$ pkcs1-conv --public-key-info < pubkey.der > pubkey.sexp

AUTHOR

This manual page was written by Magnus Holmgren <holmgren@debian.org> for the Debian GNU/Linux system (but may be used by others).

COPYRIGHT

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.