Skip to content

Commit 32532b5

Browse files
authored
Add known issue for 6.4 (#33174)
Regarding the inability to use PEM keys exported from PKCS#12 containers as discussed in #33168
1 parent 1b31c78 commit 32532b5

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

docs/reference/release-notes/6.4.asciidoc

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,20 @@
3737
[[release-notes-6.4.0]]
3838
== {es} version 6.4.0
3939

40+
[float]
41+
=== Known issues
42+
43+
{es} 6.4.0 fails to start when PEM encoded private key files that have been exported from `PKCS#12`
44+
keystores are in use. These files can be identified by the existence of lines that start with either
45+
`Bag Attributes` or `Key Attributes` in the beginning of the key file.
46+
47+
These keys can be converted to a supported format using one of the following methods:
48+
49+
* Remove the extra lines from the beginning of the file so that the file starts with the line that starts
50+
with `-----BEGIN`
51+
* Use openssl to convert it, i.e: `openssl pkcs8 -in old_format.key -topk8 -nocrypt -out new_format.key`
52+
assuming the key was not password protected.
53+
4054
Also see <<breaking-changes-6.4>>.
4155

4256
[float]

0 commit comments

Comments
 (0)