Regarding CA Certificte - Ceretion of Encrypted Private key from Recieved S/MIME Certificate.

Dear Expert ,

To work on Import Script, we are going by Certificate based Authentication . So while Generating encrypted private key from received certificate.pfx, I am getting below error . Though I was able to generate the Public key and unencrypted Private key .

I followed the Anaplan Connect Guide while creating encrypted private key , but its throwing error in 2nd command .

OpenSSL> pkcs8 -inform PEM -in "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\\PRIV_KEY.pem" -outform PEM - "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\AC_PRIV_KEY.pem" -passout pass: q2UvIFdnuzdk
pkcs8: Option unknown option -
pkcs8: Use -help for summary.
error in pkcs8

Kindly Advice me Please !

Warm Regards

Shail

Accepted answers

MarkWarren

Hi, I haven't had the chance to try this and verify but could you try changing the path, well the directory name, "Temp Folder- to be deleted" to something without spaces? I'd use "temp_folder" for example.

All comments

MarkWarren

the "out" parameter was missing (also spotted 2 backslashes in the PRIV_KEY.pem path):
OpenSSL> pkcs8 -inform PEM -in "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\PRIV_KEY.pem" -outform PEM -out "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\AC_PRIV_KEY.pem" -passout pass: q2UvIFdnuzdk

Shailendr

Hi Mark ,

thank you for your kind favor!

I did the execution of same command shared by you but still throwing error. Seems error "pkcs8: Option unknown option - error in pkcs8" hope its not able to recognize pkcs8 .

Command for Encrypted Private Key :

pkcs8 -inform PEM -in "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\PRIV_KEY.pem" -outform PEM -out "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\AC_PRIV_KEY.pem" -passout pass: q2UvIFdnuzdk

Error : pkcs8: Use -help for summary.
error in pkcs8
OpenSSL>

Infect I tried to Create Java Key Store Bundle but again throwing Error. Sharing Command Below for Java key store bindle.

Command For Java Key Store Bundle Creation :

pkcs12 -export -in "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\Publicrt222.pem" -inkey "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\PRIV_KEY.pem" -out "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\keystore_bundle.p12" -name KEYSTORE_VIR

Error :

unable to load private key
1815206065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:crypto\evp\evp_enc.c:610:
1815223077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:crypto\pkcs12\p12_decr.c:63:
181522306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:crypto\pkcs12\p12_decr.c:94:
181520907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:crypto\pem\pem_pkey.c:88:
error in pkcs12

I would be highly thankful for your support. awaiting to hear !

warm Regard

Shailender Dueby

DaanishSoomar

Hello @MarkWarren @Shailendr ,

My colleague Jon Ferneau and I coauthored this interactive CA Certificate guide which can help walk you through the conversation steps. See if this helps and let me know if you still get stuck.

https://community.anaplan.com/t5/Common-Support-Questions/Interactive-CA-Certificate-Guide/ta-p/58492

Shailendr

Hi DSoomer ,

I exactly following same commands for creation of Encrypted private and Java key store bundle ,But unfortunately its not working for we . For your Information we received Certificate in .pfx format from vendor .we did extracted public cert and Private unencrypted key.

But my challenge here is while extracting Encrypted Private key and while creation of Java key bundle I am getting with error as highlighted above.

I would be highly thankful for your great advice to crack it down.

Warm Regards

Shailender Dubey

MarkWarren

Shailendr

Dear Mark ,

thanks for your Guidance , Now I am god to generate the Encrypted Private key from Received .pfx client certificate .

Command For Encrypted Private Key.

pkcs12 -in "D:\Anaplan Integration\Certificates\XYZ.pfx" -nocerts -out "D:\Anaplan Integration\Certificates\PVTKEY.pem"

pkcs8 -inform PEM -in "D:\Anaplan Integration\Certificates\PVTKEY.pem" -outform PEM -out "D:\Anaplan Integration\Certificates\ENPVTKY.pem" -passout pass:TrwtPFZ

Now I am looking for Key store Bundle Creation for Public/Private key .Soon Update on same .

Thank you once Again for your Guidance!

Warm Regards

Shail

Quick Links

Can you help?

Unanswered questions

AnaplanXL Difficulties
Has anyone found success using Anaplan XL with Polaris models in a shared drive with or without concurrent users? My team has experienced a variety of errors, login failures, etc. sometimes it works, sometimes it doesn't. We've been recommended to save and edit files locally, which helps but certainly with its limitations…
Using Anaplan for Managing Custom Product Configurations (Example: Designer Dolls)
We’ve recently started using Anaplan to model and manage our supply chain and production planning for a niche ecommerce business that sells custom-designed dolls — each made-to-order with specific features, materials, and delivery lead times. A few interesting challenges we faced: SKU Explosion: Each doll can be customized…
Using time for something not time related - special characters :)$
We had a recent challenge with the need to "clean" invoice data descriptions from special characters. This was done previously in SQL with the a long convoluted formula "REPLACE(REPLACE(REPLACE('Ana&plan', '&', '') that would have to edited by a developer in case any new special characters came through. Using the replace…