<div dir="ltr">Hi!<div><br></div><div><div class="gmail_extra"><div class="gmail_quote">2016-01-20 14:34 GMT+01:00 Andreas Schultz <span dir="ltr"><<a href="mailto:aschultz@tpip.net" target="_blank">aschultz@tpip.net</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
otp/lib/ssl/test/erl_make_certs.erl has the complete code in Erlang<br>
to generate RSA, DSA and EC certificates including their private keys.<br>
<br>
I'm not sure whether the generate primes and keys are safe for real<br>
certificates. You should check that before (re)using the code.<br>
<br></blockquote><div><br></div><div>That code was only written for testing purposes and should not be relied on </div><div>for cryptographic safety The public_key application generates EC and DH keys </div><div>using the crypto application, this function could easily be extende to generate</div><div>RSA and DSA keys too if the crypto application is extended to call the approriate functions</div><div>in the openSSL cryptolib. This is acctually the long term plan, but not the top priority. So PR anyone?</div><div><br></div><div>Regards Ingela Erlang/OTP team - Ericsson AB</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Andreas<span><br>
<br>
On 01/20/2016 01:59 PM, Serge Aleynikov wrote:<br>
</span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>
I faced the same issue and had to resort to the RSA_generate_key call in C.<br>
<br></span><span>
On Wed, Jan 20, 2016 at 5:04 AM, Max Lapshin <<a href="mailto:max.lapshin@gmail.com" target="_blank">max.lapshin@gmail.com</a> <mailto:<a href="mailto:max.lapshin@gmail.com" target="_blank">max.lapshin@gmail.com</a>>> wrote:<br>
<br>
<br>
Hi. I cannot find a way to generate RSA private (and public) key from erlang.<br>
<br>
I've looked through public_key sources and have found Yuri's cutkey:<br>
<a href="https://github.com/yrashk/cutkey/blob/master/src/cutkey.erl" rel="noreferrer" target="_blank">https://github.com/yrashk/cutkey/blob/master/src/cutkey.erl</a><br>
<br>
I haven't found any code in public_key sources that does something like cutkey does.<br>
<br>
But I don't want to add extra dependency, maybe something has changed and it is<br>
possible to generate RSAPrivateKey.<br>
<br>
I'm writing client for letsencrypt and want fully automate all things without calling openssl via command line.<br>
<br>
_______________________________________________<br>
erlang-questions mailing list<br></span>
<a href="mailto:erlang-questions@erlang.org" target="_blank">erlang-questions@erlang.org</a> <mailto:<a href="mailto:erlang-questions@erlang.org" target="_blank">erlang-questions@erlang.org</a>><br>
<a href="http://erlang.org/mailman/listinfo/erlang-questions" rel="noreferrer" target="_blank">http://erlang.org/mailman/listinfo/erlang-questions</a><span><br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
erlang-questions mailing list<br>
<a href="mailto:erlang-questions@erlang.org" target="_blank">erlang-questions@erlang.org</a><br>
<a href="http://erlang.org/mailman/listinfo/erlang-questions" rel="noreferrer" target="_blank">http://erlang.org/mailman/listinfo/erlang-questions</a><br>
<br>
</span></blockquote><div><div>
_______________________________________________<br>
erlang-questions mailing list<br>
<a href="mailto:erlang-questions@erlang.org" target="_blank">erlang-questions@erlang.org</a><br>
<a href="http://erlang.org/mailman/listinfo/erlang-questions" rel="noreferrer" target="_blank">http://erlang.org/mailman/listinfo/erlang-questions</a><br>
</div></div></blockquote></div><br></div></div></div>