-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 If the PEM file contains the private key, then
openssl rsa -in veripay.pem -out gw.veripay.co.uk.key should work as expected. pem is just a wrapper around the data, so it should just pull it out of there if it's in there to start. On 30/09/2013 2:10 PM, Ted Byers wrote: > I issued the following command (with my own name in place of > privkey) > > openssl genrsa -out privkey.pem 2048 I then made the csr using > > openssl req -new -key privkey.pem -out cert.csr > > That is simple enough. But, I need a .key file to deploy on the > server beside the crt files. > > If I understand these commands well enough, privkey.pem ought to > contain the private key, but how do I get the right .key file from > it. > > Surely it is not as simple as > > openssl rsa -in veripay.pem -out gw.veripay.co.uk.key (which makes > a file, but since I am not sure of it, I do not want to deploy that > file yet, least I make the web server fail to start (and it is in > production use, and I do not have a system administrator to ask). > > And while I am at it, how would I modify the above commands so that > I get the .key file right at the start, when I make the key, rather > than having to try to recover it from the pem file? > > Thanks > > Ted > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > User Support Mailing List > openssl-users@openssl.org Automated List Manager > majord...@openssl.org > - -- Kelly John Rose Mississauga, ON Phone: +1 647 638-4104 Twitter: @kjrose Document contents are confidential between original recipients and sender. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSScLiAAoJEN5u/YAARo3hMzUH+weeNS8HD39hYHwR58SxsuLH geP3AgV6BDTGLAB8FR80Y+oe//CsdOMfv8K1Z5iIUwYGD3+9uUK0Qo7aTlFTQ4Op ZZ/7i+m1VsYgc0Tx1o16sU+8bABadWFipjOyKR/IsbL90hXDDbqdun/+82Z1HMOS TvV08BvLomBlKmWS9gThkf5gUpksnqpAeU2ADA5nw5ToA2d9mxx4hYxTYXCdEmun SkUW06x9/23GCgIJQrrJ+dESBVPi6MtgIXR64cFjiNeaU9y3Qbv1t0ZDzp5a4+G+ 11s6Y7rKKRNDsH77+xK01cFVKNrqeNfdKl+ZWa1nzPzORobdOU2QNJx5t8p/xpM= =ohNC -----END PGP SIGNATURE----- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org