Participating Frequently

Question

Openssl: No certificate matches private key

8 replies
12733 views
Translate

This used to work on my last computer, but I created a CSR and uploaded it to Apple and it returned a valid distribution certificate. But when I run Openssl to try and create the p12 file, I keep getting the error:

"no certificate matches private key".

My batch file looks like this:

set OPENSSL_CONF=C:\OpenSSL-Win32\bin\openssl.cfg

set RANDFILE=.rnd

openssl x509 -in ios_distribution.cer -inform DER -out developer_identity.pem -outform PEM

pause

openssl pkcs12 -export -inkey mykey.key -in developer_identity.pem -out myfile.p12

pause

I've tried just about everything, and I'm seriously stuck. Can anyone help?

This topic is closed to new replies. Start a new post to keep the conversation going.

M

MakaiMediaAuthor

Participating Frequently

So, the only thing I notice about your video, iBrent, is that you say the certificate signing request has to match the email of the account name. But in my case, this is for a client's account. Do I need to make the emailAddress= field the account admin's? Or can it still be mine?

Translate

iBr3nt

Inspiring

Hi,

I put together a series of tutorials on creating the Apple CSR request and certs on Windows a while back. They have step by step instructions including the commands I used. See if that helps, it can be tricky for sure.

http://www.youtube.com/playlist?list=PL57C122F59F8F1A43

iBrent

Translate

M

MakaiMediaAuthor

Participating Frequently

IBrent, I'll take a look and see if I missed anything. I did this on another computer but it was a couple years ago and maybe I skipped a step.

Translate

Colin Holgate

Inspiring

You can run into such issues if you still have old certificates kicking around. Go into Keychain Access and look at Certificates and My Certificates. Any that don't have a key next to them are likely to not work, but still cause problems. Of the others, delete any that are not the latest date, and export a P12 from the most recent one, to use in Flash.

Also, make sure that your provisioning files are using that latest certificate.

Translate

M

MakaiMediaAuthor

Participating Frequently

Thanks, Colin. This is for Windows, and it's a new computer. Do you think that still matters?

Translate

Colin Holgate

Inspiring

Yes, I'm sure it matters. Listen to iBrent, he makes sense. At least he did once a couple of years ago, though I think that was a fluke.

Translate

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.