te')); return $arr; } /* 遍历用户所有主题 * @param $uid 用户ID * @param int $page 页数 * @param int $pagesize 每页记录条数 * @param bool $desc 排序方式 TRUE降序 FALSE升序 * @param string $key 返回的数组用那一列的值作为 key * @param array $col 查询哪些列 */ function thread_tid_find_by_uid($uid, $page = 1, $pagesize = 1000, $desc = TRUE, $key = 'tid', $col = array()) { if (empty($uid)) return array(); $orderby = TRUE == $desc ? -1 : 1; $arr = thread_tid__find($cond = array('uid' => $uid), array('tid' => $orderby), $page, $pagesize, $key, $col); return $arr; } // 遍历栏目下tid 支持数组 $fid = array(1,2,3) function thread_tid_find_by_fid($fid, $page = 1, $pagesize = 1000, $desc = TRUE) { if (empty($fid)) return array(); $orderby = TRUE == $desc ? -1 : 1; $arr = thread_tid__find($cond = array('fid' => $fid), array('tid' => $orderby), $page, $pagesize, 'tid', array('tid', 'verify_date')); return $arr; } function thread_tid_delete($tid) { if (empty($tid)) return FALSE; $r = thread_tid__delete(array('tid' => $tid)); return $r; } function thread_tid_count() { $n = thread_tid__count(); return $n; } // 统计用户主题数 大数量下严谨使用非主键统计 function thread_uid_count($uid) { $n = thread_tid__count(array('uid' => $uid)); return $n; } // 统计栏目主题数 大数量下严谨使用非主键统计 function thread_fid_count($fid) { $n = thread_tid__count(array('fid' => $fid)); return $n; } ?>azure keyvault - Is it possible to store the Microsoft RSA Root Certificate Authority 2017 certificate in Key Vault? - Stack Ove
最新消息:雨落星辰是一个专注网站SEO优化、网站SEO诊断、搜索引擎研究、网络营销推广、网站策划运营及站长类的自媒体原创博客

azure keyvault - Is it possible to store the Microsoft RSA Root Certificate Authority 2017 certificate in Key Vault? - Stack Ove

programmeradmin3浏览0评论

When I try to store the certificate, I get the following message:

az keyvault certificate import --vault-name vault01 --name "MicrosoftRSA2017" --file "Microsoft RSA Root Certificate Authority 2017.crt"

(BadParameter) No certificate with private key found in the specified X.509 certificate content. Please specify X.509 certificate content with only one certificate containing private key. Code: BadParameter Message: No certificate with private key found in the specified X.509 certificate content. Please specify X.509 certificate content with only one certificate containing private key

.

When I try to store the certificate, I get the following message:

az keyvault certificate import --vault-name vault01 --name "MicrosoftRSA2017" --file "Microsoft RSA Root Certificate Authority 2017.crt"

(BadParameter) No certificate with private key found in the specified X.509 certificate content. Please specify X.509 certificate content with only one certificate containing private key. Code: BadParameter Message: No certificate with private key found in the specified X.509 certificate content. Please specify X.509 certificate content with only one certificate containing private key

.

Share Improve this question asked Feb 18 at 4:19 gocgoc 311 silver badge2 bronze badges 1
  • The error occurs because Azure Key Vault requires a certificate with both a public and private key. To resolve this, convert your .crt file (which only contains the public key) into a .pfx file that includes both the public and private keys, and then import it into Key Vault using the az keyvault certificate import command. – Rukmini Commented 2 days ago
Add a comment  | 

1 Answer 1

Reset to default 0

I have a sample Microsoft RSA Root Certificate Authority 2017.crt certificate:

When I tried to store the certificate, I got the same error:

The error "No certificate with private key found in the specified X.509 certificate content" usually occurs if you're trying to import a certificate without an associated private key, which is required for Key Vault to store it as a certificate.

  • The "Microsoft RSA Root Certificate Authority 2017" certificate is a public certificate, and it doesn’t contain a private key,

To resolve the error, check the below:

  • Store the certificate as a secret: Instead of using the --file option with the .crt file directly, you should base64 encode the certificate file and then upload it as a secret.
base64 "Microsoft RSA Root Certificate Authority 2017.crt" > encoded_cert.txt

az keyvault secret set --vault-name rukkkkkv33 --name "MicrosoftRSA2017" --value "$(cat encoded_cert.txt)"

Otherwise, you can Convert the certificate to a PFX format:

  • Uploading as a certificate into Key Vault requires both private key and public key.
  • If you have the private key (for example, if it’s stored somewhere else), you can combine the public certificate and private key into a PFX file like below:
openssl pkcs12 -export -out certificate.pfx -inkey privatekey.key -in Microsoft RSA Root Certificate Authority 2017.crt

Then you can upload this.pfx file into Key Vault:

az keyvault secret set --vault-name vault01 --name "MicrosoftRSA2017" --file "Microsoft RSA Root Certificate Authority 2017.crt"

If you do not have private key, then upload certificate as secret in key vault.

与本文相关的文章

发布评论

评论列表(0)

  1. 暂无评论