aborrero Hi there. In my server I get this error message when starting: Cannot load private key file /etc/ssl/private/whatever.key: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch I generated the key and the cert from a PKCS12 file, using openssl Any idea? Regards.
janjust the certificate used and the private key /etc/ssl/private/whatever.key do not belong to each other - you can also specify the pkcs12 file directly using pkcs12 </path/to/pkcs12/file>
aborrero Hi. The .crt and .key files are extracted from the pkcs12 file using openssl. I don't see anything bad with that. Using pkcs12 file prompt for a password everytime I start the server. If there is a way to remove the password from a pkcs12 file i will look for.
aborrero SOLVED! It was a bad use of openssl. To get key file: openssl pkcs12 -in file.p12 -out file.key -clcerts -nodes [...prompt for password...] To get crt file: openssl pkcs12 -in file.p12 -out file.crt -nocerts -nodes [...prompt for password...]
janjust Excellent! BTW, you can remove the password from a PKCS12 file using openssl pkcs12 -in <p12file> -nodes -out <newp12file>
