Ggtcf

I've run into a pickle, a user has a public and private key pair, generated using crypto from node.js v11.11.0.

The private key is password-protected. I distribute the public one, and use it to encrypt cipherkeys for AES encryption (hybrid mode).

The private key can be used from the command line (openssl on linux) just fine. But with node.js I get the error bad decrypt and EVP DecryptFinal.

The pair is generated like so:

crypto.generateKeyPair('rsa', 
 modulusLength: 4096,
 publicKeyEncoding: 
 type: 'spki',
 format: 'pem'
 ,
 privateKeyEncoding: 
 type: 'pkcs8',
 format: 'pem',
 cipher: 'aes-256-cbc',
 passphrase: rand_pass
 
 , (err, pub, priv) => 
 if (err) 
 console.dir(err);
 return callback( status: 500,
 success: false,
 message: err );
 
 else 
 let key_file = crypto.createHash('sha256').update(id).digest('hex');
 let dir = global.keys;
 let pub_file = dir + key_file + '.pub';
 let prv_file = dir + key_file + '.priv';
 fs.writeFileSync(pub_file, pub);
 fs.writeFileSync(prv_file, priv);
 models.User.activate(id, pub_file, prv_file, function(reply) 
 return res.status(201).json(reply);
 );
 
 );

Whereas when I read the private key I get:

-----BEGIN ENCRYPTED PRIVATE KEY-----

From the command line (and by giving the passphrase) I get:

RSA key ok
writing RSA key
-----BEGIN RSA PRIVATE KEY-----

However, loading the private key from node.js is turning into a problem. Using the method crypto.createPrivateKey(key) I cannot get to load the private key:

 var meta = query.meta; 
 var key_pem = fs.readFileSync(query.private_key, "ascii");
 if (key_pem === undefined) 
 return res.status(500).json(message: "internal error" );
 

 var priv_key = crypto.createPrivateKey(key_pem, 'pem', 'pkcs8', rand_pass);

The error is always the same, even though I've tried with various variations of encoding (key) and the parameters are identical.

Has anyone successfully used private keys with password protection in Node.JS without using a child_process but only the native method?