I created my privatekey & certificate request using
openssl req -new -newkey rsa:65536 > server.cert.csr. This took some minutes and produced 2 files.
Then I decrypted my private key using
openssl rsa -in privkey.pem -out server.cert.key
Now I want to self-sign my certificate using
openssl x509 -in server.cert.csr -out server.cert.crt -req -signkey server.cert.key -days 365 but this results in an error:
Signature did not match the certificate request
I tried the same procedure using smaller keys (only 4096bits) and then it worked. Is there no way to get a 65536bit long key self-signed?
What exactly is here the problem or is this just a bug? I am sure that I didn't mix private keys or certificate requests.