We are trying to update an SSL certificate in our Azure Web App. Accordingly to the Private Certificate Requirements we need to use triple DES for a private key now. Here's are steps that I'm doing:

1. Generate private key on my PC using triple DES:

   openssl genrsa -des3 -out privatekey.key 2048

2. Generate csr:

   openssl req -new -key privatekey.key -out mycsr.csr

3. Re-key certificate on Godaddy Portal.

4. Using new crt-file generate a pfx:

   openssl pkcs12 -export -out cert.pfx -inkey privatekey.key -in mycert.crt

Unfortunately, generated certificate is not accepted by Azure portal. I'm getting an error message "The password is incorrect, or the certificate is not valid".

CodePudding user response：

We decided to go with Certificates that are purchased on the Azure portal itself. It just not forth our time to figure it out.