Poster of Linux kernelThe best gift for a Linux geek
PLAINRSA-GEN

PLAINRSA-GEN

Section: Maintenance Commands (8)
Local index Up

BSD mandoc
 

NAME

plainrsa-gen - generator for Plain RSA keys  

SYNOPSIS

plainrsa-gen -words [-b bits ] [-e pubexp ] [-f outfile ] [-h ]  

DESCRIPTION

plainrsa-gen can be used to generate Plain RSA keys for authentication purposes. Using Plain RSA keys is optional. Other possibilities are Pre-shared keys or X.509 certificates

-b bits
bit length of the key. Default is 1024 recommended length is 2048 or even 4096 bits. Note that generating longer keys takes longer time.
-e pubexp
value of RSA public exponent. Default is 0x3 Don't change this unless you really know what you are doing!
-f outfile
outfile instead of stdout If the file already exists it won't be overwritten. You wouldn't like to lose your private key by accident, would you?

 

OUTPUT FILE FORMAT

This is the secret private key that should never leave your computer:
: RSA   {
        # RSA 1024 bits
        # pubkey=0sAQOrWlcwbAIdNSMhDt...
        Modulus: 0xab5a57306c021d3523...
        PublicExponent: 0x03
        PrivateExponent: 0x723c3a2048...
        Prime1: 0xd309b30e6adf9d85c01...
        Prime2: 0xcfdc2a8aa5b2b3c90e3...
        Exponent1: 0x8cb122099c9513ae...
        Exponent2: 0x8a92c7071921cd30...
        Coefficient: 0x722751305eafe9...
  }

The line pubkey=0sAQOrW... of the private key contains a public key that should be stored in the other peer's configuration in this format:

: PUB 0sAQOrWlcwbAIdNSMhDt...

You can also specify from and to addresses for which the key is valid:

0.0.0.0/0 10.20.30.0/24 : PUB 0sAQOrWlcwbAIdNSMhDt...
 

SEE ALSO

racoon.conf5, racoon(8)  

HISTORY

plainrsa-gen was written by An Michal Ludvig Aq michal@logix.cz and first appeared in ipsec-tools 0.4


 

Index

NAME
SYNOPSIS
DESCRIPTION
OUTPUT FILE FORMAT
SEE ALSO
HISTORY

This document was created by man2html, using the manual pages.
Time: 22:02:09 GMT, April 16, 2011