SSL certificate generation question

etcetera · 04-10-2017, 08:52 AM

https://langui.sh/2009/10/31/create-...y-via-openssl/

Looking at the above page, I generated a private SSL key and a Certificate Signing Request.

# openssl req -new -nodes -newkey rsa:2048 -keyout edw2.key -out edw2.csr

That worked. I submitted the EDW2.csr file and got back a .cer file. (signed certificate). When I attempted to combine them into a single file (.pfx) like this, I get an error:

# openssl pkcs12 -export -in edw.pem -inkey edw2.key -out edw2.pfx

No certificate matches private key

bathory · 04-10-2017, 01:28 PM

Quote:

# openssl req -new -nodes -newkey rsa:2048 -keyout edw2.key -out edw2.csr

That worked. I submitted the EDW2.csr file and got back a .cer file. (signed certificate). When I attempted to combine them into a single file (.pfx) like this, I get an error:

# openssl pkcs12 -export -in edw.pem -inkey edw2.key -out edw2.pfx

No certificate matches private key

The above means that the certificate edw.pem was issued using a different key (not the edw2.key).
Perhaps it's just a typo (wrote edw.pem instead of edw2.pem) in the last command used.