Question Re: Import Private Key without using decrypt password in Technology Q&A

Import Private Key without using decrypt password

joel_langoyan — Tue, 26 Sep 2023 01:57:39 GMT

hi Experts,

As with title, is possible to bypass the requirement to enter a decrypt password when importing a private key? Client IT has forwarded us the certificate and private key but say that there was never any password for the private key. The certificate and private key were supposed provided by CA and have used it in some testing.

All references I have found the entering of password which not sure how to proceed if this decrypt password is mandatory to import private keys.

Appreciate any inputs. Thank you.

Regards,

Joel

Re: Import Private Key without using decrypt password

fprokopiuk — Tue, 26 Sep 2023 08:11:25 GMT

Hi Joel,

For the start why do you need someone's private key? Because basically it should never be shared with partners.

Re: Import Private Key without using decrypt password

joel_langoyan — Tue, 26 Sep 2023 21:27:13 GMT

Hi Filip,

Client wants that their existing connection with the bank would work the same when connection is moved to PI from their current system.

Re: Import Private Key without using decrypt password

JacoVanebo — Wed, 27 Sep 2023 05:33:22 GMT

Hi Filip,

I don't think you can get around not providing a password when importing the private key in Key Storage, but couldn't you just set a password for the private key using ssh-keygen before importing the private key? I mean, if the private key does not have a password today, then you could just set one.

Best regards,
Jacob

Re: Import Private Key without using decrypt password

fprokopiuk — Wed, 27 Sep 2023 10:14:47 GMT

It's as Jacob said, I don't think you can overcome the requirement for password for private key. So you need to ask the one who provided the private key to provide new one with password.

Re: Import Private Key without using decrypt password

joel_langoyan — Thu, 28 Sep 2023 08:20:02 GMT

Generated via openssl a pfx file from client's private key and certs and imported the file successfully.