I generated a self-signed SSL cert on Debian with openssl, and installed the certificate in Windows, so it loads in Chrome okay.

However, I have no .key file in /etc/ssl/certs/

I only have a .pem file (which is used in lighttpd.conf)

Is there anything wrong with this? What does the .key file do, and should I go through openssl again to make a .key file?

1 Answer 1


If your .pem file has lines that say -----BEGIN RSA PRIVATE KEY----- and -----END RSA PRIVATE KEY----- then your key is in that combined .pem file and that is just fine.

  • you're right. I used a different website to get the command the second time, so it must have had an option/switch omitted. thanks
    – cantsay
    Aug 19, 2013 at 16:56

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .