search

jglobus / JGlobus

jGlobus is a collection of Java client libraries for Globus® Toolkit security, GRAM, and GridFTP.
http://www.globus.org/toolkit/jglobus/
Apache License 2.0
24 stars 44 forks source link

"no key" error while loading proxy certificate with -----BEGIN PRIVATE KEY----- prefix #146

Open dharezlak opened 9 years ago

dharezlak commented 9 years ago

voms-proxy-init version 3.0.3 generates proxy certificate with -----BEGIN PRIVATE KEY----- and -----END PRIVATE KEY----- prefix and postfix which is not recognized by org.globus.gsi.X509Credential.load(InputStream). Cutrrently only BEGIN RSA PRIVATE KEY sequence is supported.

mpawlik commented 9 years ago

:+1:

dharezlak commented 9 years ago

According to http://www.cryptosys.net/pki/rsakeyformats.html BEGIN PRIVATE KEY means the key is in the PKCS#8 format while BEGIN RSA PRIVATE KEY indicates the PKCS#1 format.

mpawlik commented 9 years ago

Whereas one is encrypted and one is unencrypted.

mkasztelnik commented 9 years ago

:+1:

vokac commented 9 years ago

I had same issue with private keys generated using openssl 1.0 and created workaround, see JGlobus#118