Do a proof of concept. "openssl genrsa" will make the name of the

file part of the password prompt unless it's standard input...

More will be added...

diff --git a/apps/genrsa.c b/apps/genrsa.c
index 5d7fca404d2639c973eb3a16dd79c01279efbf46..dfcb523ebabae0375308753a2494b7eb25d65043 100644 (file)
--- a/apps/genrsa.c
+++ b/apps/genrsa.c
@@ -226,8 +226,14 @@ bad:
                l+=rsa->e->d[i];
                }
        BIO_printf(bio_err,"e is %ld (0x%lX)\n",l,l);
-       if (!PEM_write_bio_RSAPrivateKey(out,rsa,enc,NULL,0,NULL, passout))
+       {
+       PW_CB_DATA cb_data;
+       cb_data.password = passout;
+       cb_data.prompt_info = outfile;
+       if (!PEM_write_bio_RSAPrivateKey(out,rsa,enc,NULL,0,
+               (pem_password_cb *)password_callback,&cb_data))
                goto err;
+       }
 
        ret=0;
 err: