2

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR.

From what poking around I've done, I can't find it in any of the usual locations. Obviously the web browser knows where it is because I get those security warning messages, but how can i find it on the server?

Improve this question
3
  • What web server? Apache and such have particular configuration directives to indicate the private key location. Otherwise, strace and log what files the webserver touches when it starts up.
    – thrig
    Commented Aug 24, 2015 at 22:03
  • Maybe share "the usual locations" so we know where you have looked, exactly?
    – Klaatu von Schlacker
    Commented Aug 24, 2015 at 22:09
  • 1
    If you're using a self-signed cert does it really matter if you can't find the original key? Just create a new one; it's all snake oil anyway.
    – Chris Davies
    Commented Aug 24, 2015 at 22:43

4 Answers 4

Reset to default
2

I made this one for Fedora 20. Essentially the same as Red Hat. It's the green part.

/etc/pki structure on Fedora 20

Improve this answer
0

It is under:

/etc/pki

I believe next it's TLS then private.

You'll want to ensure mod SSL is installed and then change your ssl.conf file

Improve this answer
1
  • I think it depends where you decided to put it when you run the creation of the certificate command. So, that wouldn't help.
    – VaTo
    Commented Aug 25, 2015 at 3:58
0

Might I suggest using the find command? As a user with elevated privileges, so try: 

find / -type f -name *.key

This should - at the very least - narrow down the possibilities.

Improve this answer
0

Thanks to everyone who responded. Upon some more digging, the SSL is managed by the java application that is running on the server.

I first found the key store file

find / -name *.p12

And then used the key tool to access the certificates

{App_Install_Path}/jdk/bin/keytool ....key tool commands....

and from there it was a bounce of the application to recognize my certificate changes.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .