PDA

View Full Version : Bad Key with SSL import from IIS 5



brianwilliford
09-14-2005, 11:29 AM
Moving site from ISS 5 to centOS running Cold Fusion with DirectAdmin. All is well expect the SSL Paste a pre-generated certificate and key does not accept the key and cert exported from ISS. I get "Details Key is Invalid".
Here is what I did:
Convert the ISS cert to a .pfx file Apache server wold understand.

Copied the .pxf to the server running directAdmin - following command using OPENSSL:

1. To export the Private key file from the .pfx file
openssl pkcs12 -in filename.p12 -nocerts -out key.pem

2. To export the Certificate file from the .pfx file
openssl pkcs12 -in filename.p12 -clcerts -nokeys -out cert.pem

Open files and pasted them in the SSL panel, again I get Bad Key Error.

any clues?

brianwilliford
09-14-2005, 03:04 PM
Seems I needed to remove the passwords from the key file before the DA would take the key file

To remove password:
openssl rsa -in key.pem -out new-server-key.pem