Forum Discussion
VeriSign Certificate for SSL Profile (missing Key)
Dears,
We Have a VeriSign certificate that we need to use on our ASM for a client SSL profile, the server team sent me the .PEM file and i imported it to the ASM.
when i go to system>>File management>>SSL Certificates list , i see the contents of the file as "certificate" not "Certificate & Key".
because of that i'm not able to create the Client SLL profile as i still need the Key.
I don't have that much knowledge with the Certificates and the server team claims that this is what they got from VeriSign website.
I'm not sure if the key should be included in the same .PEM file or if there is something that we need to do on the ASM to fix this issue.
your help is much appreciated Ahmad.
3 Replies
- Kevin_Stewart
Employee
Open up the PEM file in a text editor and see if the private key is there. The certificate section will begin and end with -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- respectively, and the private key section will begin with -----BEGIN RSA PRIVATE KEY----- If you do see the private key section, then extract those two sections to separate text files, import the key first, and then the certificate.
If you don't see the private key section, then you'll need to go back to the server team and/or Verisign to get the key.
- Ahmad_Mohaidat_
Nimbostratus
Thanks Kevin for your help , I don't see the private key section in the file , I will ask the server team to double check again.
- sinu_121261
Nimbostratus
Openssl x509 -in name.pem -out name.crt openssl rsa -in name.pem -out name.key
copy the pem file in to a directory run the above command you will get name.crt/name.key bind the key and cert with profile.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com