search

chris2511 / xca

X Certificate and Key management
http://xca.hohnstaedt.de
Other
1.54k stars 204 forks source link

Displayed private-key #397

Closed Eldarion85 closed 1 year ago

Eldarion85 commented 2 years ago

Hello, if you open the database without a password, no private-key can be exported. If you click on the key, the details will open. Now the key is displayed in this window. The help says the key shown is encrypted with the database password. So far so good. But when I change the database password and reopen the database, it shows the exact same key. What is that for a key that is displayed there even without the database password and how is it generated. If it encrypts the private key with the database password, it would have to change if the database password is changed. But that doesn't happen.

chris2511 commented 1 year ago

The displayed key is the public part. In case of RSA the modulus. It is also part of the resulting certificate and not secret. The private key is not required for displaying purposes and left encrypted in the database until it is needed to sign something. Changing the database password re-encrypts all private keys with the new password.