NAME¶
plainrsa-gen —
generator for Plain RSA
keys
SYNOPSIS¶
plainrsa-gen |
[-b
bits]
[-e pubexp]
[-f outfile]
[-h] |
DESCRIPTION¶
plainrsa-gen can be used to generate
Plain
RSA keys
for authentication purposes. Using
Plain RSA
keys
is optional. Other possibilities are
Pre-shared
keys
or
X.509 certificates
.
- -b
bits
- bit length of the key. Default is
1024
, recommended length is
2048
or even 4096
bits.
Note that generating longer keys takes longer time.
- -e
pubexp
- value of RSA public exponent. Default is
0x3
. Don't change this unless you really know what
you are doing!
- -f
outfile
- outfile instead of
stdout
. If the file already exists it won't be
overwritten. You wouldn't like to lose your private key by accident, would
you?
This is the secret
private key
that should
never leave your computer:
: RSA {
# RSA 1024 bits
# pubkey=0sAQOrWlcwbAIdNSMhDt...
Modulus: 0xab5a57306c021d3523...
PublicExponent: 0x03
PrivateExponent: 0x723c3a2048...
Prime1: 0xd309b30e6adf9d85c01...
Prime2: 0xcfdc2a8aa5b2b3c90e3...
Exponent1: 0x8cb122099c9513ae...
Exponent2: 0x8a92c7071921cd30...
Coefficient: 0x722751305eafe9...
}
The line
pubkey=0sAQOrW...
of the
private key
contains a
public
key
that should be stored in the other peer's configuration in this
format:
: PUB 0sAQOrWlcwbAIdNSMhDt...
You can also specify
from
and
to
addresses for which the key is valid:
0.0.0.0/0 10.20.30.0/24 : PUB 0sAQOrWlcwbAIdNSMhDt...
SEE ALSO¶
racoon.conf(5),
racoon(8)
HISTORY¶
plainrsa-gen was written by
Michal
Ludvig ⟨michal@logix.cz⟩ and first appeared in
ipsec-tools 0.4.