Page History

The Private Key must be of type PKCS1 or PKCS8 in PEM format.

Note
PKCS8 support was added in release 2.3.1

The easiest way to determine what type you have is to look at the certificate headers.

...

-----BEGIN ENCRYPTED PRIVATE KEY-----
<YOUR PRIVATE KEY CONTENT>
-----END ENCRYPTED PRIVATE KEY-----

Warning
Encrypted private keys are not supported

To convert a an unencrypted private key from PKCS8 to PKCS1 use the openssl command below:

Code Block
openssl rsa -in xxxxx-private-no-rsa.pem.key -out xxxxx-private-converted.pem.key

Note

OpenSSL 3+ does not support PKCS1 by default and you will need use -traditional on the openssl rsa command.

Code Block
openssl rsa -in xxxxx-private-no-rsa.pem.key -traditional -out xxxxx-private-converted.pem.key

Versions Compared