I generated a self-signed SSL cert on Debian with openssl, and installed the certificate in Windows, so it loads in Chrome okay.

However, I have no .key file in /etc/ssl/certs/

I only have a .pem file (which is used in lighttpd.conf)

Is there anything wrong with this? What does the .key file do, and should I go through openssl again to make a .key file?

1 Answer 1


If your .pem file has lines that say -----BEGIN RSA PRIVATE KEY----- and -----END RSA PRIVATE KEY----- then your key is in that combined .pem file and that is just fine.

  • you're right. I used a different website to get the command the second time, so it must have had an option/switch omitted. thanks
    – cantsay
    Aug 19, 2013 at 16:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.