Wednesday, November 2, 2011

F5 Big-IP Decrypting a private key

1. Transfer key file to directory /config/ssl/ssl.key/myfile.key
2. Change directory on CLI. Command: cd /config/ssl/ssl.key
3. Use the OpenSSL utility to open or decrypt the key file. Apply the command:
openssl rsa -in myencryptedkeyfile.key -out mydecryptedkeyfile.key
4. You will be prompted to enter the Passphrase originally used to encrypt the key:
Enter pass phrase for myencryptedkeyfile.key:
writing RSA key
5. The following output appears if you have entered the wrong Passphrase:
Enter pass phrase for myencryptedkeyfile.key:
unable to load Private Key
21566:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:325:
21566:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:425:

No comments:

Post a Comment