Details
-
Improvement
-
Resolution: Duplicate
-
Major
-
4.6.1
Description
In following these steps: https://developer.couchbase.com/documentation/server/4.6/security/security-x509certsintro.html
I tried using couchbase-cli ssl-manage --set-node-certificate using a cert and key that were minted by our in-house CA. It was rejected by the couchbase server as follows:
[bweir@lca1-cbvt05 ~]$ couchbase-cli ssl-manage -c $(hostname -f) --set-node-certificate
|
"Invalid private key type: PrivateKeyInfo."
|
It seems that the key file is in PKCS#8 format which couchbase cannot understand. Can support for this be added? More info:
https://tools.ietf.org/html/rfc5208
My current workaround is to use openssl to convert to PKCS#1 format with these commands:
openssl rsa -in pkey.key.pkcs8 -out pkey.key.der -outform DER
|
openssl rsa -in pkey.key.der -inform DER -out pkey.key.pkcs1 -outform PEM
|