Search code examples
javasslcertificatessl-certificatersa

Create a private Key from a PositiveSSL Certificate

I've just receive a certificate, containing those files:

- Root CA Certificate - AddTrustExternalCARoot.crt
- Intermediate CA Certificate - USERTrustRSAAddTrustCA.crt
- Intermediate CA Certificate - SectigoRSADomainValidationSecureServerCA.crt
- Your PositiveSSL Certificate - www_guerrilla_app.crt

and also the PositiveSSL Certificate in text format.

I would like to know if it is possible to generete the Private Key from the command line, maybe using Java or other tool

Solution

  • No. If you could it would mean the entire https internet is broken. You need the key from whoever generated the CSR.

    The proper workflow is: create a SSL key, generate a Certificate Signing Request (CSR) with that key, provide the CSR to the SSL Certificate provider (PositiveSSL), have them sign it and give you a certificate.