After installing OpenSSL I was required to create a new environment variable: Name: OPENSSL_CONF Value: C:\Program Files\OpenSSL\openssl.cnf In powershell: $env:OPENSSL_CONF = “${env:ProgramFiles}\OpenSSL\openssl.cnf” This value differs from previous installation versions (as seen in a previous edit of this post). Also, don’t forget to add the openssl binary folder ${env:ProgramFiles}\OpenSSL to your Path.
Note: if you don’t want to add -S all the time to make sure your commits are signed, there is a proposal (branch ‘pu‘ for now, December 2013, so no guarantee it will make it to a git release) to add a config which will take care of that option for you. Update May 2014: … Read more
Your understanding of “public keys encrypt, private keys decrypt” is correct… for data/message ENCRYPTION. For digital signatures, it is the reverse. With a digital signature, you are trying to prove that the document signed by you came from you. To do that, you need to use something that only YOU have: your private key. A … Read more
openssl genrsa -out mykey.pem 1024 will actually produce a public – private key pair. The pair is stored in the generated mykey.pem file. openssl rsa -in mykey.pem -pubout > mykey.pub will extract the public key and print that out. Here is a link to a page that describes this better. EDIT: Check the examples section … Read more