Decodifica del file .P7M con chiave (.pem) utilizzando OpenSSL

Naviga le tue risposte
3

La mia conoscenza della sicurezza è limitata, quindi ho bisogno di aiuto qui.

La domanda

I want to Decrypt a .P7M file using its private key (.pem). I would prefer to use OpenSSL for this.

Provato finora 

OpenSSL smime -decrypt -in "Secret.p7m" -inkey "Key.pem" > Result.txt

Errore 

unable to load signing key file
7548:error:0906D06C:PEM routines:PEM_read_bio:no start line:.\crypto\pem\pem_lib
.c:701:Expecting: ANY PRIVATE KEY
error in smime**The P7M File**

Content-Type: application/pkcs7-mime; name="smime.p7m"; smime-type=enveloped-data
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7m"
Content-Description: S/MIME Encrypted Message

BLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLABLA

    
posta Nick Prozee 04.06.2015 - 09:57
fonte

2 risposte

1

Il tuo comando di decrittografia è corretto.

Sembra che ci sia qualcosa di sbagliato nel tuo file chiave. Inizia davvero con -----BEGIN RSA PRIVATE KEY----- e termina con -----END RSA PRIVATE KEY----- (attenzione al numero esatto di trattini)? O è forse codificato DER che richiede di aggiungere -keyform DER la riga di comando della decrittografia?

BTW: puoi verificare l'integrità della chiave stessa con openssl rsa -in Key.pem

    
risposta data 04.06.2015 - 12:20
fonte
0

Ho incontrato questo stesso problema e la risposta di Lupo è sulla strada giusta. Puoi provare a convertire la chiave usando un comando come: 

openssl pkcs12 -in <key file.p7m> -out <key_file.pem> -nodes
    
risposta data 02.12.2018 - 04:40
fonte

Leggi altre domande sui tag

dovrebbe ~ / .cache / keyring- * essere cancellato? L'SSL bidirezionale è sufficiente per più server Web che comunicano tra loro?