-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If the PEM file contains the private key, then

openssl rsa -in veripay.pem -out gw.veripay.co.uk.key

should work as expected. pem is just a wrapper around the data, so it
should just pull it out of there if it's in there to start.

On 30/09/2013 2:10 PM, Ted Byers wrote:
> I issued the following command (with my own name in place of
> privkey)
> 
> openssl genrsa -out privkey.pem 2048 I then made the csr using
> 
> openssl req -new -key privkey.pem -out cert.csr
> 
> That is simple enough.  But, I need a .key file to deploy on the 
> server beside the crt files.
> 
> If I understand these commands well enough, privkey.pem ought to 
> contain the private key, but how do I get the right .key file from
> it.
> 
> Surely it is not as simple as
> 
> openssl rsa -in veripay.pem -out gw.veripay.co.uk.key (which makes
> a file, but since I am not sure of it, I do not want to deploy that
> file yet, least I make the web server fail to start (and it is in 
> production use, and I do not have a system administrator to ask).
> 
> And while I am at it, how would I modify the above commands so that
> I get the .key file right at the start, when I make the key, rather
> than having to try to recover it from the pem file?
> 
> Thanks
> 
> Ted 
> ______________________________________________________________________
>
> 
OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List
> openssl-users@openssl.org Automated List Manager
> majord...@openssl.org
> 

- -- 
Kelly John Rose
Mississauga, ON
Phone: +1 647 638-4104
Twitter: @kjrose

Document contents are confidential between original recipients and sender.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.20 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSScLiAAoJEN5u/YAARo3hMzUH+weeNS8HD39hYHwR58SxsuLH
geP3AgV6BDTGLAB8FR80Y+oe//CsdOMfv8K1Z5iIUwYGD3+9uUK0Qo7aTlFTQ4Op
ZZ/7i+m1VsYgc0Tx1o16sU+8bABadWFipjOyKR/IsbL90hXDDbqdun/+82Z1HMOS
TvV08BvLomBlKmWS9gThkf5gUpksnqpAeU2ADA5nw5ToA2d9mxx4hYxTYXCdEmun
SkUW06x9/23GCgIJQrrJ+dESBVPi6MtgIXR64cFjiNeaU9y3Qbv1t0ZDzp5a4+G+
11s6Y7rKKRNDsH77+xK01cFVKNrqeNfdKl+ZWa1nzPzORobdOU2QNJx5t8p/xpM=
=ohNC
-----END PGP SIGNATURE-----
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to