{"id":158,"date":"2010-07-08T10:49:17","date_gmt":"2010-07-08T17:49:17","guid":{"rendered":"http:\/\/www.dreness.com\/blog\/?p=158"},"modified":"2010-07-08T10:49:17","modified_gmt":"2010-07-08T17:49:17","slug":"ssl-passphrase-in-mac-os-x-server","status":"publish","type":"post","link":"https:\/\/dreness.com\/blog\/archives\/158","title":{"rendered":"SSL Passphrase in Mac OS X Server"},"content":{"rendered":"<p>Here&#8217;s a one-liner (spread across two lines for the 80 column internet) for mining Mac OS \u00a0X Server&#8217;s SSL passphrase out of Keychain:<\/p>\n<pre><span style=\"color: #000000;\">security dump-<\/span><span style=\"color: #000000;\">keychain<\/span><span style=\"color: #000000;\"> -d \/Library\/<\/span><span style=\"color: #000000;\">Keychains<\/span><span style=\"color: #000000;\">\/System.<\/span><span style=\"color: #000000;\">keychain<\/span><span style=\"color: #000000;\"> | \\\r\ngrep '\"<\/span><span style=\"color: #000000;\">svce<\/span><span style=\"color: #888888;\"><span style=\"color: #000000;\">\"&lt;blob&gt;=\"Mac OS X Server certificate management\"' -A<\/span><span style=\"color: #000000;\"> 3 | tail -n 1<\/span><\/span><\/pre>\n<p>Typically this is most useful right before you say something like the following, which writes out a decrypted version of the private key (after you supply the passphrase, of course :)<\/p>\n<pre>openssl rsa -in key.pem -out decrypted-key.pem<\/pre>\n<pre><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Here&#8217;s a one-liner (spread across two lines for the 80 column internet) for mining Mac OS \u00a0X Server&#8217;s SSL passphrase out of Keychain: security dump-keychain -d \/Library\/Keychains\/System.keychain | \\ grep &#8216;&#8221;svce&#8221;&lt;blob&gt;=&#8221;Mac OS X Server certificate management&#8221;&#8216; -A 3 | tail &hellip; <a href=\"https:\/\/dreness.com\/blog\/archives\/158\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-158","post","type-post","status-publish","format-standard","hentry","category-bitbucket"],"_links":{"self":[{"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/posts\/158","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/comments?post=158"}],"version-history":[{"count":2,"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/posts\/158\/revisions"}],"predecessor-version":[{"id":160,"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/posts\/158\/revisions\/160"}],"wp:attachment":[{"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/media?parent=158"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/categories?post=158"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dreness.com\/blog\/wp-json\/wp\/v2\/tags?post=158"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}