h2o / h2o/picotls

OpenSSL RSA private key default format changes to PKCS#8

Open
#511 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
640
Forks
173
Avg merge
22h 14m
Merged PRs (30d)
3

Description

Newer versions of openssl genrsa/openssl genpkey write out the RSA private keys keys in the PKCS#8 format which do not load when starting h2o:
> [/usr/local/etc/h2o/h2o.conf:28] in command listen, failed to load private key file:/usr/local/etc/h2o/cert/flash.gos.ca.key:010001

Can be worked around using the following flag with openssl rsa/openssl genrsa to convert/make PKCS1 format keys.
`-traditional Write the key using the traditional PKCS#1 format instead of the PKCS#8 format`

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.