Importing certificate to a keyring

Using a new utility kyrtool, I've been trying to create keyring and import the particular domain certificate into it.

Certificate has been issued by RapidSSL. It's an SHA2 certificate issued for "*.domain.tld".

First of all I've created a new keyring file:

kyrtool create -k C:\path\keyring.kyr -p password

Then I've converted my pfx certificate to pem in opnessl:

openssl pkcs12 -in certificate.pfx -out certificate.pem

Then I've tried to import my PEM into the new keyring:

kyrtool import all -i certificate.pem -k C:\path\keyring.kyr -v

And an error occured:

Using keyring path 'C:\path\keyring.kyr'
No private key found in the input file
ReadPEMPrivateKey returned error 0x0495
Invalid arguments

My PEM certificate contains both -----BEGIN RSA PRIVATE KEY----- and -----BEGIN CERTIFICATE----- blocks.

Any idea? Thanks, JiKra

Solution

Ok, problem was with the wrong order in certificate chain in PEM file. There was a global CA (GeoTrust CA) certificate before the issuer certificate (RapidSSL 256 - G3).

We've resolved the problem by dividing the whole certificate into four separate PEM files and importing them in the proper order.

kyrtool import keys
kyrtool import certs
kyrtool import roots ...global
kyrtool import roots ...intemediate

JiKra

EDIT 1:

As we realized, the main problem could be with the intermediate certificate of RapidSSL 256 G3 where there were no paddings at the end. This certificate ends exactly with 7bit content: