Google cloud ssl certificate “The SSL certificate could not be parsed”
I need help with configuring ssl certificate on google cloud. I've already obtained my ssl certificate (crt file & private key). And I've followed the link trying to create a "SSL certificate resource".
I've tried everything but the cmd below just doesn't work:
gcloud compute ssl-certificates create cert --certificate /opt/bitnami/etc/
smartmeetingroom_tk.crt --private-key /opt/bitnami/etc/serv.key
The error message I got is:
Could anyone tell me what is wrong with my command (or file)?
Thanks a million!!
update:
below is the screenshot of error msg when I add "--verbosity debug":
I obtained ssl certificate from this website.
BTW the crt & private key is already pem encoded. Cos they are all readable using text editor and:
The start&end of crt file looks like:
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
The start&end of private key file looks like:
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
https google-cloud-platform ssl-certificate google-compute-engine gcloud
asked Nov 21 '18 at 17:06
Yuge ChenYuge Chen
406
|
show 2 more comments
I need help with configuring ssl certificate on google cloud. I've already obtained my ssl certificate (crt file & private key). And I've followed the link trying to create a "SSL certificate resource".
I've tried everything but the cmd below just doesn't work:
gcloud compute ssl-certificates create cert --certificate /opt/bitnami/etc/
smartmeetingroom_tk.crt --private-key /opt/bitnami/etc/serv.key
The error message I got is:
Could anyone tell me what is wrong with my command (or file)?
Thanks a million!!
update:
below is the screenshot of error msg when I add "--verbosity debug":
I obtained ssl certificate from this website.
BTW the crt & private key is already pem encoded. Cos they are all readable using text editor and:
The start&end of crt file looks like:
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
The start&end of private key file looks like:
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
https google-cloud-platform ssl-certificate google-compute-engine gcloud
asked Nov 21 '18 at 17:06
Yuge ChenYuge Chen
406
1. Could you add the --verbosity debug flag to your gcloud commands for more info. 2.Could you give more details/steps on how you got your certificate.
– dany L
Nov 21 '18 at 18:22
The error received is possibly indicative of 1.wrong file type, 2 wrong file path, or 3 the file itself. Did you check with Gogetssl regarding the validity of your certificate?
– dany L
Nov 21 '18 at 20:15
Please check that your file is in PEM format. Let me know if this thread helps.
– dany L
Nov 21 '18 at 22:55
Hi dany. Thanks for helping. I got the below error when I tried to convert to PEM:C:OpenSSL-Win64bin>openssl x509 -inform DER -outform PEM -in C:Userschen_Desktopsmartmeetingroom_tk.crt -out smartmeetingroom_tk.crt.pem unable to load certificate 53576:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:cryptoasn1tasn_dec.c:1129: 53576:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:cryptoasn1tasn_dec.c:289:Type=X509
– Yuge Chen
Nov 22 '18 at 4:47
When you opened the file, was it in binary or did it start with"-------BEGIN CERTIFICATE------ .......".
– dany L
Nov 22 '18 at 13:56
|
show 2 more comments
I need help with configuring ssl certificate on google cloud. I've already obtained my ssl certificate (crt file & private key). And I've followed the link trying to create a "SSL certificate resource".
I've tried everything but the cmd below just doesn't work:
gcloud compute ssl-certificates create cert --certificate /opt/bitnami/etc/
smartmeetingroom_tk.crt --private-key /opt/bitnami/etc/serv.key
The error message I got is:
Could anyone tell me what is wrong with my command (or file)?
Thanks a million!!
update:
below is the screenshot of error msg when I add "--verbosity debug":
I obtained ssl certificate from this website.
BTW the crt & private key is already pem encoded. Cos they are all readable using text editor and:
The start&end of crt file looks like:
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
The start&end of private key file looks like:
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
https google-cloud-platform ssl-certificate google-compute-engine gcloud
asked Nov 21 '18 at 17:06
Yuge ChenYuge Chen
406
I need help with configuring ssl certificate on google cloud. I've already obtained my ssl certificate (crt file & private key). And I've followed the link trying to create a "SSL certificate resource".
I've tried everything but the cmd below just doesn't work:
gcloud compute ssl-certificates create cert --certificate /opt/bitnami/etc/
smartmeetingroom_tk.crt --private-key /opt/bitnami/etc/serv.key
The error message I got is:
Could anyone tell me what is wrong with my command (or file)?
Thanks a million!!
update:
below is the screenshot of error msg when I add "--verbosity debug":
I obtained ssl certificate from this website.
BTW the crt & private key is already pem encoded. Cos they are all readable using text editor and:
The start&end of crt file looks like:
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
The start&end of private key file looks like:
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
https google-cloud-platform ssl-certificate google-compute-engine gcloud
https google-cloud-platform ssl-certificate google-compute-engine gcloud
asked Nov 21 '18 at 17:06
Yuge ChenYuge Chen
406
asked Nov 21 '18 at 17:06
Yuge ChenYuge Chen
406
edited Nov 22 '18 at 6:40
Yuge Chen
asked Nov 21 '18 at 17:06
Yuge ChenYuge Chen
406
asked Nov 21 '18 at 17:06
Yuge ChenYuge Chen
406
asked Nov 21 '18 at 17:06
Yuge ChenYuge Chen
406
406
1. Could you add the --verbosity debug flag to your gcloud commands for more info. 2.Could you give more details/steps on how you got your certificate.
– dany L
Nov 21 '18 at 18:22
The error received is possibly indicative of 1.wrong file type, 2 wrong file path, or 3 the file itself. Did you check with Gogetssl regarding the validity of your certificate?
– dany L
Nov 21 '18 at 20:15
Please check that your file is in PEM format. Let me know if this thread helps.
– dany L
Nov 21 '18 at 22:55
Hi dany. Thanks for helping. I got the below error when I tried to convert to PEM:C:OpenSSL-Win64bin>openssl x509 -inform DER -outform PEM -in C:Userschen_Desktopsmartmeetingroom_tk.crt -out smartmeetingroom_tk.crt.pem unable to load certificate 53576:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:cryptoasn1tasn_dec.c:1129: 53576:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:cryptoasn1tasn_dec.c:289:Type=X509
– Yuge Chen
Nov 22 '18 at 4:47
When you opened the file, was it in binary or did it start with"-------BEGIN CERTIFICATE------ .......".
– dany L
Nov 22 '18 at 13:56
|
show 2 more comments
1. Could you add the --verbosity debug flag to your gcloud commands for more info. 2.Could you give more details/steps on how you got your certificate.
– dany L
Nov 21 '18 at 18:22
The error received is possibly indicative of 1.wrong file type, 2 wrong file path, or 3 the file itself. Did you check with Gogetssl regarding the validity of your certificate?
– dany L
Nov 21 '18 at 20:15
Please check that your file is in PEM format. Let me know if this thread helps.
– dany L
Nov 21 '18 at 22:55
Hi dany. Thanks for helping. I got the below error when I tried to convert to PEM:C:OpenSSL-Win64bin>openssl x509 -inform DER -outform PEM -in C:Userschen_Desktopsmartmeetingroom_tk.crt -out smartmeetingroom_tk.crt.pem unable to load certificate 53576:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:cryptoasn1tasn_dec.c:1129: 53576:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:cryptoasn1tasn_dec.c:289:Type=X509
– Yuge Chen
Nov 22 '18 at 4:47
When you opened the file, was it in binary or did it start with"-------BEGIN CERTIFICATE------ .......".
– dany L
Nov 22 '18 at 13:56
1. Could you add the --verbosity debug flag to your gcloud commands for more info. 2.Could you give more details/steps on how you got your certificate.
– dany L
Nov 21 '18 at 18:22
1. Could you add the --verbosity debug flag to your gcloud commands for more info. 2.Could you give more details/steps on how you got your certificate.
– dany L
Nov 21 '18 at 18:22
The error received is possibly indicative of 1.wrong file type, 2 wrong file path, or 3 the file itself. Did you check with Gogetssl regarding the validity of your certificate?
– dany L
Nov 21 '18 at 20:15
The error received is possibly indicative of 1.wrong file type, 2 wrong file path, or 3 the file itself. Did you check with Gogetssl regarding the validity of your certificate?
– dany L
Nov 21 '18 at 20:15
Please check that your file is in PEM format. Let me know if this thread helps.
– dany L
Nov 21 '18 at 22:55
Please check that your file is in PEM format. Let me know if this thread helps.
– dany L
Nov 21 '18 at 22:55
Hi dany. Thanks for helping. I got the below error when I tried to convert to PEM:
C:OpenSSL-Win64bin>openssl x509 -inform DER -outform PEM -in C:Userschen_Desktopsmartmeetingroom_tk.crt -out smartmeetingroom_tk.crt.pem unable to load certificate 53576:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:cryptoasn1tasn_dec.c:1129: 53576:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:cryptoasn1tasn_dec.c:289:Type=X509– Yuge Chen
Nov 22 '18 at 4:47
Hi dany. Thanks for helping. I got the below error when I tried to convert to PEM:
C:OpenSSL-Win64bin>openssl x509 -inform DER -outform PEM -in C:Userschen_Desktopsmartmeetingroom_tk.crt -out smartmeetingroom_tk.crt.pem unable to load certificate 53576:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:cryptoasn1tasn_dec.c:1129: 53576:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:cryptoasn1tasn_dec.c:289:Type=X509– Yuge Chen
Nov 22 '18 at 4:47
When you opened the file, was it in binary or did it start with"-------BEGIN CERTIFICATE------ .......".
– dany L
Nov 22 '18 at 13:56
When you opened the file, was it in binary or did it start with"-------BEGIN CERTIFICATE------ .......".
– dany L
Nov 22 '18 at 13:56
|
show 2 more comments
1 Answer
1
active
oldest
votes
- Do you have read permissions for those files?
- As suggested, add verbosity flag for more details.
- If you are trying to create SSL certificate for HTTPS load balancer- I'd suggest using Google's managed certificate
answered Nov 21 '18 at 18:44
Boris BakshiyevBoris Bakshiyev
15
Yes I got the permission error previously but fixed it by signing in. Then I got another error related to certificate parsing
– Yuge Chen
Nov 22 '18 at 4:50
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53417229%2fgoogle-cloud-ssl-certificate-the-ssl-certificate-could-not-be-parsed%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
- Do you have read permissions for those files?
- As suggested, add verbosity flag for more details.
- If you are trying to create SSL certificate for HTTPS load balancer- I'd suggest using Google's managed certificate
answered Nov 21 '18 at 18:44
Boris BakshiyevBoris Bakshiyev
15
Yes I got the permission error previously but fixed it by signing in. Then I got another error related to certificate parsing
– Yuge Chen
Nov 22 '18 at 4:50
add a comment |
- Do you have read permissions for those files?
- As suggested, add verbosity flag for more details.
- If you are trying to create SSL certificate for HTTPS load balancer- I'd suggest using Google's managed certificate
answered Nov 21 '18 at 18:44
Boris BakshiyevBoris Bakshiyev
15
Yes I got the permission error previously but fixed it by signing in. Then I got another error related to certificate parsing
– Yuge Chen
Nov 22 '18 at 4:50
add a comment |
- Do you have read permissions for those files?
- As suggested, add verbosity flag for more details.
- If you are trying to create SSL certificate for HTTPS load balancer- I'd suggest using Google's managed certificate
answered Nov 21 '18 at 18:44
Boris BakshiyevBoris Bakshiyev
15
- Do you have read permissions for those files?
- As suggested, add verbosity flag for more details.
- If you are trying to create SSL certificate for HTTPS load balancer- I'd suggest using Google's managed certificate
answered Nov 21 '18 at 18:44
Boris BakshiyevBoris Bakshiyev
15
answered Nov 21 '18 at 18:44
Boris BakshiyevBoris Bakshiyev
15
answered Nov 21 '18 at 18:44
Boris BakshiyevBoris Bakshiyev
15
answered Nov 21 '18 at 18:44
Boris BakshiyevBoris Bakshiyev
15
15
Yes I got the permission error previously but fixed it by signing in. Then I got another error related to certificate parsing
– Yuge Chen
Nov 22 '18 at 4:50
add a comment |
Yes I got the permission error previously but fixed it by signing in. Then I got another error related to certificate parsing
– Yuge Chen
Nov 22 '18 at 4:50
Yes I got the permission error previously but fixed it by signing in. Then I got another error related to certificate parsing
– Yuge Chen
Nov 22 '18 at 4:50
Yes I got the permission error previously but fixed it by signing in. Then I got another error related to certificate parsing
– Yuge Chen
Nov 22 '18 at 4:50
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53417229%2fgoogle-cloud-ssl-certificate-the-ssl-certificate-could-not-be-parsed%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1. Could you add the --verbosity debug flag to your gcloud commands for more info. 2.Could you give more details/steps on how you got your certificate.
– dany L
Nov 21 '18 at 18:22
The error received is possibly indicative of 1.wrong file type, 2 wrong file path, or 3 the file itself. Did you check with Gogetssl regarding the validity of your certificate?
– dany L
Nov 21 '18 at 20:15
Please check that your file is in PEM format. Let me know if this thread helps.
– dany L
Nov 21 '18 at 22:55
Hi dany. Thanks for helping. I got the below error when I tried to convert to PEM:
C:OpenSSL-Win64bin>openssl x509 -inform DER -outform PEM -in C:Userschen_Desktopsmartmeetingroom_tk.crt -out smartmeetingroom_tk.crt.pem unable to load certificate 53576:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:cryptoasn1tasn_dec.c:1129: 53576:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:cryptoasn1tasn_dec.c:289:Type=X509– Yuge Chen
Nov 22 '18 at 4:47
When you opened the file, was it in binary or did it start with"-------BEGIN CERTIFICATE------ .......".
– dany L
Nov 22 '18 at 13:56