Invalid OpenSSL traditional private key format IDP3.x

[John Dennis]

On 08/12/2016 02:44 PM, Shweta Kautia wrote:
> Scott,
>
> Thank you for looking into it. Individual who first set it up, doesn’t
> work here anymore, we have some documentation that we can reference.
> Yes there was a password used to encrypt. We are using the same pwd to
> generate the new pair.
> Unfortunately, we had to do a from-scratch implementation - and are now
> wanting to re-use the old keypair (if it’s an option).
> We are doing a Dockerized IdP installation for our campuses, so we
> decided to do a clean install.

I have not been following this tread carefully but it sounds like you're 
not sure if the key is being decrypted correctly.

If the key is encrypted it is almost certainly done so with PKCS12. 
There are many PKCS12 utilities available. Grab one of the command line 
PKCS12 utilities and see if the password you're trying actually 
decryptes the key.

hint: openssl pkcs12

You probably also want to verify the key file is in PEM format and not 
binary. If it's PEM it will be ASCII text and the first line will begin 
with

-----BEGIN



-- 
John