Regarding CA Certificte - Ceretion of Encrypted Private key from Recieved S/MIME Certificate.

Dear Expert ,

To work on Import Script, we are going by Certificate based Authentication . So while Generating encrypted private key from received certificate.pfx, I am getting below error . Though I was able to generate the Public key and unencrypted Private key .

I followed the Anaplan Connect Guide while creating encrypted private key , but its throwing error in 2nd command .

OpenSSL> pkcs8 -inform PEM -in "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\\PRIV_KEY.pem" -outform PEM - "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\AC_PRIV_KEY.pem" -passout pass: q2UvIFdnuzdk
pkcs8: Option unknown option -
pkcs8: Use -help for summary.
error in pkcs8

Kindly Advice me Please !

Warm Regards

Shail

Accepted answers

MarkWarren

Hi, I haven't had the chance to try this and verify but could you try changing the path, well the directory name, "Temp Folder- to be deleted" to something without spaces? I'd use "temp_folder" for example.

All comments

MarkWarren

the "out" parameter was missing (also spotted 2 backslashes in the PRIV_KEY.pem path):
OpenSSL> pkcs8 -inform PEM -in "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\PRIV_KEY.pem" -outform PEM -out "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\AC_PRIV_KEY.pem" -passout pass: q2UvIFdnuzdk

Shailendr

Hi Mark ,

thank you for your kind favor!

I did the execution of same command shared by you but still throwing error. Seems error "pkcs8: Option unknown option - error in pkcs8" hope its not able to recognize pkcs8 .

Command for Encrypted Private Key :

pkcs8 -inform PEM -in "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\PRIV_KEY.pem" -outform PEM -out "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\AC_PRIV_KEY.pem" -passout pass: q2UvIFdnuzdk

Error : pkcs8: Use -help for summary.
error in pkcs8
OpenSSL>

Infect I tried to Create Java Key Store Bundle but again throwing Error. Sharing Command Below for Java key store bindle.

Command For Java Key Store Bundle Creation :

pkcs12 -export -in "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\Publicrt222.pem" -inkey "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\PRIV_KEY.pem" -out "D:\Anaplan Integration\Xtra\Temp Folder- to be deleted\keystore_bundle.p12" -name KEYSTORE_VIR

Error :

unable to load private key
1815206065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:crypto\evp\evp_enc.c:610:
1815223077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:crypto\pkcs12\p12_decr.c:63:
181522306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:crypto\pkcs12\p12_decr.c:94:
181520907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:crypto\pem\pem_pkey.c:88:
error in pkcs12

I would be highly thankful for your support. awaiting to hear !

warm Regard

Shailender Dueby

DaanishSoomar

Hello @MarkWarren @Shailendr ,

My colleague Jon Ferneau and I coauthored this interactive CA Certificate guide which can help walk you through the conversation steps. See if this helps and let me know if you still get stuck.

https://community.anaplan.com/t5/Common-Support-Questions/Interactive-CA-Certificate-Guide/ta-p/58492

Shailendr

Hi DSoomer ,

I exactly following same commands for creation of Encrypted private and Java key store bundle ,But unfortunately its not working for we . For your Information we received Certificate in .pfx format from vendor .we did extracted public cert and Private unencrypted key.

But my challenge here is while extracting Encrypted Private key and while creation of Java key bundle I am getting with error as highlighted above.

I would be highly thankful for your great advice to crack it down.

Warm Regards

Shailender Dubey

MarkWarren

Shailendr

Dear Mark ,

thanks for your Guidance , Now I am god to generate the Encrypted Private key from Received .pfx client certificate .

Command For Encrypted Private Key.

pkcs12 -in "D:\Anaplan Integration\Certificates\XYZ.pfx" -nocerts -out "D:\Anaplan Integration\Certificates\PVTKEY.pem"

pkcs8 -inform PEM -in "D:\Anaplan Integration\Certificates\PVTKEY.pem" -outform PEM -out "D:\Anaplan Integration\Certificates\ENPVTKY.pem" -passout pass:TrwtPFZ

Now I am looking for Key store Bundle Creation for Public/Private key .Soon Update on same .

Thank you once Again for your Guidance!

Warm Regards

Shail

Quick Links

Can you help?

Unanswered questions

Create a Filter to show all the elements of that level based on selection in hierarchy
Hello Community members, Requirement Details: I have 5 levels of composite hierarchy list (A1, A2, A3, A4, A5). I have published a module in UX, Now the requirement is If user select a list member from A4 level in the context selector or Custom Filter I have to display all the list members under that A4 level. How can I…
import monthly data with months in columns
is there a way to import data with months in columns (usual excel table view)? I have to transform the data so there are rows to cover each period in the upload data form, but I am wondering if there is a better way to just import the data as is with the months in the columns. please let me know what you think. thank you,
Cloudworks Big Query Integration Fail
Hello, I am receiving an 'Anaplan Upload Failed' Status Description when testing my integration with a Big Query dataset. The integration imports data from BQ to our Anaplan model. No other details given in the error log. I suspect that Cloudworks is not even picking up the file but am not sure what we did wrong on the set…