2 Replies - 771 Views - Last Post: 12 April 2017 - 10:36 AM

#1 DarenR  Icon User is offline

  • D.I.C Lover

Reputation: 592
  • View blog
  • Posts: 3,823
  • Joined: 12-January 10

openssl unable to load certificates

Posted 12 April 2017 - 08:19 AM

hey all,

i created a crt certificate and a key using openssl

Quote

genrsa -out pghqaitweb01sha2O1.key 2048
req -out pghqaitweb01sha2O.crt -key pghqaitweb01sha2O.key -new -sha256



when i run this:

Quote

pkcs12 -export -out pghqaitweb01sha2O.pfx -inkey pghqaitweb01sha2O1.key -in pghqaitweb01sha2O.crt


i get unable to load certificates error in pkcs12


crt:

Quote

-----BEGIN CERTIFICATE REQUEST-----
encrypted stuff here
-----END CERTIFICATE REQUEST-----


key:

Quote

-----BEGIN RSA PRIVATE KEY-----
encrypted stuff here
-----END RSA PRIVATE KEY-----


this is for windows 2012 r2 server and OpenSSL 1.1.0e 16 Feb 2017


any thoughts?

Is This A Good Question/Topic? 0
  • +

Replies To: openssl unable to load certificates

#2 no2pencil  Icon User is offline

  • Professor Snuggly Pants
  • member icon

Reputation: 6538
  • View blog
  • Posts: 30,604
  • Joined: 10-May 07

Re: openssl unable to load certificates

Posted 12 April 2017 - 10:12 AM

Is this in Apache? If so, what does the SSL-Error log say?

Sorry, I didn't understand I guess. It's been a while since I've done this, but my understanding was :

You generate the CSR which gives you a private key.
You then provide CSR to approver to sign, they return CRT.
You load CRT & key in the SSL server config.

What does running pkcs12 accomplish here?
Was This Post Helpful? 0
  • +
  • -

#3 DarenR  Icon User is offline

  • D.I.C Lover

Reputation: 592
  • View blog
  • Posts: 3,823
  • Joined: 12-January 10

Re: openssl unable to load certificates

Posted 12 April 2017 - 10:36 AM

combines them so you can make a pfx file in order to put it on the server
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1