Převod RSA klíče s heslem na klíč bez hesla pro použití pro webový server

Jak převést zašifrovaný klíč k certifikátu

Warning

U všech příkazů platí: dvakrát měř, jednou řež!

Potřebuji převést šifrovaný privátní klíč na obyčejnou verzi např. pro webový server.

Spustím následující příkaz - bude chtít zadání hesla ke klíči:

openssl rsa -in privatekey.pem -out private.unencrypted.key

Zašifrovaný klíč vypadá nějak takto:

-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----

Pokud zadám správné heslo, získám nezašifrovaný klíč.

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----