Missing: Private Key while uploading the Client Certificate

Hello

I am trying to import a client certificate into Appian and below is the error message I am seeing in the logs and the admin console:

The provided PEM file is not valid for certificate authentication. Missing: Private Key

Here are few details which may serve as background context:

  • A .crt file is saved as .pem. Before conversion, I have ensured that the file is not in binary format.
  • The .pem file has got the private key and I am able to decode its info by the using the tool at www.sslshopper.com/certificate-decoder.html.
  • The certificate is signed by Go Daddy which is a Trusted Certificate Authority.

Can some one please give inputs on this? An early response would be really appreciated. 

Best Regards,

Sikhi Vahan B

  Discussion posts and replies are publicly visible

Parents
  • 0
    Certified Lead Developer

    Hi, we also faced the same issue but we found a way to solve it:

    1. Verify that the certificate was created using openSSL 1.0.1 or 1.0.2, otherwise the certificate won't work in Appian

    2. Change the .crt certificate extension with .pem

    3. Open your .pem doc with a document editor. It should contains -----BEGIN CERTIFICATE----- string -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- string2 -----END CERTIFICATE-----

    4. Insert at the top of the .pem document the .key document file. -----BEGIN RSA PRIVATE KEY----- string -----END RSA PRIVATE KEY-----

    5. Add the updated .pem certificate without private key password (the certificate now contains the password encrypted)

Reply
  • 0
    Certified Lead Developer

    Hi, we also faced the same issue but we found a way to solve it:

    1. Verify that the certificate was created using openSSL 1.0.1 or 1.0.2, otherwise the certificate won't work in Appian

    2. Change the .crt certificate extension with .pem

    3. Open your .pem doc with a document editor. It should contains -----BEGIN CERTIFICATE----- string -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- string2 -----END CERTIFICATE-----

    4. Insert at the top of the .pem document the .key document file. -----BEGIN RSA PRIVATE KEY----- string -----END RSA PRIVATE KEY-----

    5. Add the updated .pem certificate without private key password (the certificate now contains the password encrypted)

Children