Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenSSL RSA private key default format changes to PKCS#8 #511

Open
krowbar opened this issue Jan 18, 2024 · 0 comments
Open

OpenSSL RSA private key default format changes to PKCS#8 #511

krowbar opened this issue Jan 18, 2024 · 0 comments

Comments

@krowbar
Copy link

krowbar commented Jan 18, 2024

Newer versions of openssl genrsa/openssl genpkey write out the RSA private keys keys in the PKCS#8 format which do not load when starting h2o:

[/usr/local/etc/h2o/h2o.conf:28] in command listen, failed to load private key file:/usr/local/etc/h2o/cert/flash.gos.ca.key:010001

Can be worked around using the following flag with openssl rsa/openssl genrsa to convert/make PKCS1 format keys.
-traditional Write the key using the traditional PKCS#1 format instead of the PKCS#8 format

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant