I generated a self-signed SSL cert on Debian with openssl, and installed the certificate in Windows, so it loads in Chrome okay.

However, I have no .key file in /etc/ssl/certs/

I only have a .pem file (which is used in lighttpd.conf)

Is there anything wrong with this? What does the .key file do, and should I go through openssl again to make a .key file?


If your .pem file has lines that say -----BEGIN RSA PRIVATE KEY----- and -----END RSA PRIVATE KEY----- then your key is in that combined .pem file and that is just fine.

  • you're right. I used a different website to get the command the second time, so it must have had an option/switch omitted. thanks – cantsay Aug 19 '13 at 16:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.