在没有 shell 交互的情况下通过 openssl 生成带有密码的公钥和私钥的问题答案

【问题标题】：Problem generating public and private keys with password via openssl without shell interaction在没有 shell 交互的情况下通过 openssl 生成带有密码的公钥和私钥的问题
【发布时间】：2021-04-05 11:13:32
【问题描述】：

问题：

使用一次性输入生成一对私钥和公钥

我的尝试（未创建文件）：

#!/bin/bash

read -p "Please input secret: " secret

mkdir -p ./src/app-for-purchasing-service/config/jwt

openssl genrsa -passout pass:"$secret" -aes256 -out ./src/app-for-purchasing-service/config/jwt/new-private.pem 4096
openssl rsa -pubout -in ./src/app-for-purchasing-service/config/jwt/new-private.pem -passin pass:$secret ./src/app-for-purchasing-service/config/jwt/new-public.pem -passout pass:$secret
echo $secret >> ./src/app-for-purchasing-service/.env

【问题讨论】：

那么，当你运行这个脚本时会发生什么？您收到错误消息吗？出乎意料的结果？
Please input secret: Generating RSA private key, 4096 bit long modulus (2 primes) ..................................++++ ..............................................++++ e is 65537 (0x010001) rsa: Use -help for summary.@larsks
您可以将该输出编辑到您的问题中，以便我们可以正确查看格式吗？知道哪个命令输出到底是什么也很有帮助。

标签： bash openssl

【解决方案1】：

我解决了！

#!/bin/bash

read -p "Please input secret: " secret

mkdir -p ./src/app-for-purchasing-service/config/jwt

openssl genrsa -passout pass:"$secret" -aes256 -out ./src/app-for-purchasing-service/config/jwt/private.pem 4096
openssl rsa -pubout -passin pass:$secret -in ./src/app-for-purchasing-service/config/jwt/private.pem -out ./src/app-for-purchasing-service/config/jwt/public.pem
echo "JWT_PASS=$secret" >>./src/app-for-purchasing-service/.env

【讨论】：