如何在没有PEM编码的RSA私钥的Google Cloud Platform上设置SSL证书

Question

I have bought SSL certificate and would like to install it on my website hosted on google cloud platform. I have successfully installed the certificate on my Microsoft IIS 8 server and when I visit https://example.com connection is secured. However, I suppose, I need to finish installing process according to this guide . This doc says I need to upload a new certificate on the page App Engine page. But it accepts only PEM encoded RSA private key. The seller of this certificate didn't provide this key in a proper file type and all my attempts to convert it via OpenSLL failed. Is there another way to setup this certificate without difficult converting procedure?

Answer 1

To get the PEM and RSA key files required for the App Engine, do this:

• Export the certificate from the IIS server in a PFX format (eg. server.pfx)
• Transfer the file to a computer that has OpenSSL
• Execute: openssl pkcs12 -in server.pfx -nokeys -out server.pem
• Execute: openssl pkcs12 -in server.pfx -nocerts -out server.key
• Execute: openssl rsa -in server.key -out server-no-password.key

Use the server.pem and server-no-password.key in your App Engine

Answer 2

As Dan Cornilescu mentioned openssl rsa -in <your_key_file> -text > <your_key_file>.pem is the way to convert request file. If u got an error "Unable to load Private Key. Expecting any private key" the way to fix it is to replace ">" for "-out"