Forum Discussion
olivierb_69026
Nimbostratus
Feb 20, 2009SSL key length = 0 bits
Hello,
We have here a weird behaviour when creating a SSL certificate.
After having created all the stuff, the KEY is present (area is filled in when clicking to 'export...'), the import was ok but on the 'key screen', the size indicates : 0 bits.
Here is the context:
Originally, we got a PFX file extracted with openssl on the F5 appliance like:
openssl pkcs12 -in .pfx -nocerts -out AAA_Key_2009.pem
it asks us a password wich goes ok and then to enter a "Pem passphrase". Specifying a random password that is repeated for the confirmation of course.
Once we get the key, we do the same for the certificate:
openssl pkcs12 -in .pfx -nokeys -out AAA_Cert_2009.pem
Creating the certificate goes fine but shit happens when creating the associated KEY. Tried it several times. It passes correctly the import parsing section and is displayed when I press on "Export" but it only gives the information that thekey is 0 bit long.
Is it a question of key extract (something to change in the openssl command ) ? Some kind of unexpected result from the F5 box ?
Can anyone give a hand on this issue or at least heard about something like tha before.
Reards,
/O.
- Jatt_Dill_40963
Nimbostratus
The cause is incomplete command during conversion. Add -nodes switch at the syntax that specifies ignore password on the key file.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects