Re^2: Issue with LWP loading client certificate

Further down the rabbit hole we go. Open one door and another presents itself.

We cannot have unencrypted .pfx files for the private key on the server. But, there's notation stating the password for the private key can get passed into the IO::Socket with a subroutine. This part doesn't make sense to me. From what I've found this is how it's put together, but it's still failing.

use LWP::UserAgent;
use Data::Dumper;
use IO::Socket::SSL qw(debug4);

$endpoint = ‘https://omit/commotest';

$ua = LWP::UserAgent->new;
$ua->ssl_opts(SSL_cert_file => 'der.cer');
$ua->ssl_opts(SSL_key_file => 'privatekey.pfx');
$ua->ssl_opts(SSL_passwd_cb => sub { return "passwordvaluehere"; } );
$ua->ssl_opts(SSL_use_cert => '1');

$response = $ua->get($endpoint);           

if ($response->is_success) 
 {  print Dumper $response; }
else { print "Error: " . $response->status_line, "\n"; }
[download]

But now I'm getting the following response ... We're using a simple passphrase for now to test with, no symbols. Research online showed other users had issues with complex passphrases and the decryption.

DEBUG: .../IO/Socket/SSL.pm:2411: Failed to load key from file (no PEM
+ or DER)
SSL error:  4824: 1 - error:0606F076:digital envelope routines:EVP_PKC
+S82PKEY:unsupported private key algorithm
SSL error:  4824: 2 - error:140B000D:SSL routines:SSL_CTX_use_PrivateK
+ey_file:ASN1 lib
[download]

Comment on Re^2: Issue with LWP loading client certificate Select or Download Code

Replies are listed 'Best First'.
Re^3: Issue with LWP loading client certificate by haj (Vicar) on Jun 20, 2021 at 15:15 UTC
I would guess that your `privatekey.pfx` is all you need. That extension is used for PKCS#12 files, which are containers usually having the certificate and the private key embedded. An extra `SSL_key_file` must be PEM or DER (that's what the message says) but you should make progress by providing the .pfx file as `SSL_cert_file` and drop the `SSL_key_file`: `$ua = LWP::UserAgent->new; $ua->ssl_opts(SSL_cert_file => 'privatekey.pfx'); $ua->ssl_opts(SSL_passwd_cb => sub { return "passwordvaluehere"; } ); $ua->ssl_opts(SSL_use_cert => '1');` [download]	[reply] [d/l]
Re^4: Issue with LWP loading client certificate by ffrost (Acolyte) on Jun 21, 2021 at 12:00 UTC
That worked. It's finally working!	[reply]