Need a plain text RSA private key from IIS 5.x

I just bought a HPsa7120 SSL accelerator - excellent stuff, but I need to move a SSL cert from my Win2k server to it.  I used OpenSSL to get a .key file, but the header's got a bunch of descriptive stuff in it that the HP pukes on.  

Anyone know how to get a plain, unencrypted key file from a IIS .pfx file?  (It's my cert, I have all the passwords,etc.)

Scott
NotwiseAsked:
Who is Participating?
 
matt_t1Connect With a Mentor Commented:
Starting with a PFX (PKCS12 archive), using OpenSSL you need to run:

openssl pkcs12 -nocerts -nodes -in iisfile.pfx -out keyfile.pem

You then need to strip the junk off the .pem to get a clean rsa key as follows:

openssl rsa -in keyfile.pem -out keyfile.rsa

Important Note: BE VERY CAREFUL WITH THE PEM AND RSA FILES!  These contain your unencrypted private key...

Hope this fixes your problems.
0
 
SysExpertCommented:
I would talk to HP, since it's their card.....
ALso check the HP/compaq site for a FAQ or known issues.

I hope this helps !
0
 
SunBowCommented:
yeah, skip the plain-text talk, you sound like a cracker-jack

Keys can be imported and exported in a variety of formats (ID's by extension). Use of plain text has no value to an admin. Just keep it in files. You can even use browers to help use of certificates.

If you've got all the rights, access, files, and HP pukes, then this is a question for HP. Tell 'em you won't buy there stuff if it won't function as advertised. Make them respond.

Maybe they were a little tied before due to the Compaq thing. By now they should be chomping at the bit to support you and get company moving again. If not, well, aren't there other players in town? (or maybe you don't even need accelerator in first place. could be an unnecessary bell or whistle)
0
Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

 
SunBowCommented:
I've got no idea how a plain-text file could help you in such a case.
0
 
ahoffmannCommented:
listening ...
0
 
SunBowCommented:
hmm...
       nice use of caps lock meThinks
0
 
SpideyModCommented:
All,
I am unlocking this question in preparation for cleanup.  I will return in 7 days to finalize this question.  Please leave any recommendations for the final state of this question, I will take all recommendations into consideration.  Failing any feedback, I may decide in 7 days to delete or PAQ this question with no refund.  Thanks.

SpideyMod
Community Support Moderator @Experts Exchange
0
 
SpideyModCommented:
All,
I am unlocking this question in preparation for cleanup.  I will return in 7 days to finalize this question.  Please leave any recommendations for the final state of this question, I will take all recommendations into consideration.  Failing any feedback, I may decide in 7 days to delete or PAQ this question with no refund.  Thanks.

SpideyMod
Community Support Moderator @Experts Exchange
0
 
matt_t1Commented:
Would be kinda nice to know why my answer was rejected...
0
 
SpideyModCommented:
matt_t1,
Please read my statement above.  It is only for the cleanup effort, not as a means to indicate your answer is incorrect.  If your answer is the correct one, state so.  If others agree or if you are the only one who lays claim to the points, it will most likely be accepted as the answer.  I am cleaning up all 6,000+ locked items on this site as the feature is no longer available and all locked questions are quite old and in need of finalizing.

SpideyMod
Community Support Moderator @Experts Exchange
0
 
matt_t1Commented:
Spidey,

Sorry - I get it now.  I do believe my answer is correct - it's certainly the exact method we use to get clean, unencrypted keys here in our lab.

Matt.
0
 
SpideyModCommented:
answered

SpideyMod
Community Support Moderator @Experts Exchange
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.