Re: Letting openssl tools understand openssh keys?

Alan Buxey <[email protected]> Mon, 11 Aug 2025 23:20:42 +0100
Newsgroups gmane.comp.encryption.openssl.user
Message-ID <CAOVYXj_tZDp2BGjZRhRSGmdC+HfsNfZMSyXj5SnOQvRdwmjxVA@mail.gmail.com>
Trying to do this inline or do you have access to the keys?  If doing an
audit and you have key access then there is an OpenSSH tool that can help:


ssh-keygen -y -P "" -f "$path_to_keyfile"

If there's a password then it'll error. If not then it'll return no error

There are a few OpenSSH ASN.1 formats, the legacy and the new secure format
etc there are also other ways of examining the key files to check whether
there is an encrypted element, that varies depending on type of key

Regards

Alan

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAOVYXj_tZDp2BGjZRhRSGmdC%2BHfsNfZMSyXj5SnOQvRdwmjxVA%40mail.gmail.com.