[Cryptography-dev] openssl command two that needs a pyca/cryptography rewrite

[Paul Kehrer]

This just generates a 2048-bit traditional OpenSSL RSA private key and
encrypts it under the password provided to stdin. You can use our
standard generation APIs and serialize the private key to encrypted
form with private_bytes.

-Paul


On Mon, Aug 2, 2021 at 12:49 PM Dan Stromberg <dstromberglists at gmail.com> wrote:
>
>
> The second command looks like:
> ['openssl', 'genrsa', '-aes128', '-passout', 'stdin', '2048']
>
> I believe this is generating a public key, that will later be used by ssh.
>
> This one probably isn't much of a problem, but it might be better to go all pyca/cryptography (one dependency) rather than openssl(1) and pyca/cryptography (two dependencies).
>
> Any suggestions?
>
> Thanks!
>
>
> _______________________________________________
> Cryptography-dev mailing list
> Cryptography-dev at python.org
> https://mail.python.org/mailman/listinfo/cryptography-dev