Adam Ronthal wrote:
> 
> Hi all,
> 
> I'm having trouble getting the private key out of an IIS .key cert.
> 
> I've followed the instructions to strip off the extra ASN1 SEQUENCE data at
> the beginning of the key, but it doesn't seem to work:
> 
> On Win32:
> 
> E:\openssl-win32>openssl rsa -inform NET -in priv.key -out key.pem
> read RSA key
> Enter Private Key password:
> unable to load key
> 1692:error:0D08C007:asn1 encoding routines:D2I_NETSCAPE_PKEY:expecting an
> asn1 sequence:.\crypto\asn1\n_pkey.c:311:address=3131288 offset=0
> 1692:error:0D08E08B:asn1 encoding routines:d2i_Netscape_RSA_2:unable to
> decode rsa private key:.\crypto\asn1\n_pkey.c:268:
> 1692:error:0D08D06F:asn1 encoding routines:d2i_Netscape_RSA:decoding
> error:.\crypto\asn1\n_pkey.c:4535002:address=8650824 offset=17
> 

Try the -sgckey option. If that doesn't work try exporting with a
different password.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to