Forum Discussion

olivierb_69026's avatar
olivierb_69026
Icon for Nimbostratus rankNimbostratus
Feb 20, 2009

SSL key length = 0 bits

Hello,

 

 

We have here a weird behaviour when creating a SSL certificate.

 

After having created all the stuff, the KEY is present (area is filled in when clicking to 'export...'), the import was ok but on the 'key screen', the size indicates : 0 bits.

 

 

Here is the context:

 

 

Originally, we got a PFX file extracted with openssl on the F5 appliance like:

 

 

openssl pkcs12 -in .pfx -nocerts -out AAA_Key_2009.pem

 

 

it asks us a password wich goes ok and then to enter a "Pem passphrase". Specifying a random password that is repeated for the confirmation of course.

 

Once we get the key, we do the same for the certificate:

 

 

openssl pkcs12 -in .pfx -nokeys -out AAA_Cert_2009.pem

 

 

Creating the certificate goes fine but shit happens when creating the associated KEY. Tried it several times. It passes correctly the import parsing section and is displayed when I press on "Export" but it only gives the information that thekey is 0 bit long.

 

 

Is it a question of key extract (something to change in the openssl command ) ? Some kind of unexpected result from the F5 box ?

 

 

Can anyone give a hand on this issue or at least heard about something like tha before.

 

 

Reards,

 

 

/O.
  • The cause is incomplete command during conversion. Add -nodes switch at the syntax that specifies ignore password on the key file.

     

     

    openssl pkcs12 -in cert_export.pfx -out cert_file.pem -nodes

     

     

    Jatinder