THE INFORMATION IN THIS ARTICLE APPLIES TO:
- Mail Express, all versions
SYMPTOM
Client uses EFT to generate the CSR and KEY file to obtain a signed SSL Certificate. When attempting to apply the received signed SSL Certificate and the KEY file, the process fails.
RESOLUTION
EFT does not generate the private key in a format recognized by Mail Express. Follow the steps below to use OpenSSL to convert the private key into a format recognized by Mail Express:
- Acquire OpenSSL by going to http://www.slproweb.com/products/Win32OpenSSL.html and downloading the following:
- Win32 - Win32 OpenSSL v1.0.0(x) Light ← “x” should be the most recent version.
- Win32 - Visual C++ 2008 Redistributables
OR
- Win64 - Win64 OpenSSL v1.0.0(x) Light ←“x” should be the most recent version.
- Win64 - Visual C++ 2008 Redistributables (x64)
- Install the appropriate package from 1.b above.
- Install the appropriate package from 1.a above.
- Navigate to the bin subdirectory of the OpenSSL directory (or add it to the Windows Path so it is recognized).
- Run the following command:
openssl.exe rsa -in <path:\PKCS8 Format Encrypted Key Filename> -out <path:\Traditional Format Encrypted Key Filename> -des3
/>
NOTE: The command will prompt for the original key’s password and a password for the new key. The same password can be used for both.