rsaazure-keyvaultrsa-sha256

Azure key vault certificate throws bad parameter error

When I upload the certificate as this:

-----BEGIN CERTIFICATE-----
{my certificate}
-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----
{my key}
-----END PRIVATE KEY-----

I am getting the error:

The type of the private key of the X.509 certificate content is not supported. Supported key types are: [ec, ec-hsm, rsa, rsa-hsm].

Can you tell me why I am not able to upload the certificate?

https://docs.solarisgroup.co.uk/guides/encryption-examples/#Java

i am referring the above link and trying to use the private/public keys used in this example.

Solution

  • Initially I used the same public and private key from the blog and created a .pem file. When tried to upload I got the same error:

    enter image description here

    The error "The type of the private key of the X.509 certificate content is not supported. Supported key types are: [ec, ec-hsm, rsa, rsa-hsm]." usually occurs if there is an issue with private key being used or formatted when you're attempting to upload the certificate to Azure Key Vault.

    Hence to resolve the error and upload the cert to Azure key vault check the below:

    # 1. Generate RSA private key
openssl genpkey -algorithm RSA -out rsa_key.pem -pkeyopt rsa_keygen_bits:2048

# 2. Generate CSR (Certificate Signing Request)
openssl req -new -key rsa_key.pem -out csr.pem

# 3. Generate self-signed certificate
openssl x509 -req -in csr.pem -signkey rsa_key.pem -out cert.pem -days 3650

# 4. Combine the private key and certificate into a single file
copy cert.pem + rsa_key.pem combinedruk.pem

    enter image description here

    Edit the file and remove the ? from the end of the file and save:

    enter image description here

    Now I am able to upload the .pem file successfully:

    enter image description here

    enter image description here