Decrypt PEM containing key and certificate (2024)

I have a .pem file which contains both my certificate and encrypted private key, ie:

Bag Attributes....-----BEGIN CERTIFICATE-----....-----END CERTIFICATE-----Bag Attributes....-----BEGIN ENCRYPTED PRIVATE KEY-----....-----END ENCRYPTED PRIVATE KEY-----

And I need to instead have a .pem file containing both the certificate and the decrypted private key. How can I achieve this on linux, preferrably utilising the openssl application?

Improve this question

asked Mar 21, 2018 at 13:32

MaddenMadden

14111 gold badge11 silver badge44 bronze badges

1 Answer

Sorted by: Reset to default

To decrypt a private key from a pem file you would do something like this with a subcommand (rsa, pkey, pkcs8, pkcs12):

openssl rsa -in inputfilename -out outputfilename

Your input file is different because you concatenated both keys in one file. But you can simple edit the pem file to split it in 2 files.

Improve this answer

edited Apr 22, 2020 at 11:57

answered Mar 21, 2018 at 17:53

bbaassssiieebbaassssiiee

1,36511 gold badge1111 silver badges1717 bronze badges

I think you need a subcommand in there. Maybe pkey? Please @ me when you fix it and I'll remove my downvote.
–Spiff

Mar 21, 2018 at 19:51
Yes, it should be pkey for new format keys (PKCS8) or rsa for the older PKCS1.
–user1686

Mar 21, 2018 at 21:59
Added suggestion of @Spiff
–bbaassssiiee

Mar 24, 2018 at 8:09
2

To do it without editing: openssl x509 <in >out; openssl pkey <in >>out
–dave_thompson_085

Mar 24, 2018 at 10:04
Hi All, is there any updated answer for this? I have the same issue. These commands did not work for me
–iUser

Oct 26, 2022 at 5:04

Add a comment |

Decrypt PEM containing key and certificate (2024)

1 Answer

Not the answer you're looking for? Browse other questions tagged encryptionsslcertificateopenssl or ask your own question.

Not the answer you're looking for? Browse other questions tagged
encryption
ssl
certificate
openssl
or ask your own question.