IBM Support

Does my private key (pem) match my SSL certificate?

Question & Answer


Question

Does my private key (pem) match my SSL certificate?

Answer

If you are experiencing an issue where you have applied the private key for your site to the PCA and you are still seeing missing traffic it would be wise to verify that the key matches the certificate on the application server.?

Using the .pem file of the private key you can run this command on the PCA (which includes OpenSSL)

$ openssl rsa -noout -modulus -in server.key | openssl md5


Then you can use the certificate for the domain.

$ openssl x509 -noout -modulus -in server.crt | openssl md5
The certificate file should begin with
============== begin RSA certificate =========================
and end with
============== end RSA certificate ==========================

If the output of those commands are the same then the cert and the key match.? If they are not then the pem file is not correct for the site's certificate.
?"

[{"Business Unit":{"code":"BU055","label":"Cognitive Applications"},"Product":{"code":"SSERNK","label":"Tealeaf Customer Experience"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
08 December 2018

UID

ibm10777959