TLS certificate works on Ubuntu 18.04 but not on Centos 7.6Skype/Spotify Installation Error: Cannot Install...

Which likelihood function is used in linear regression?

Why level 0 espers are considered espers if they have no powers at all?

Is it incorrect to write "I rate this book a 3 out of 4 stars?"

In reversi, can you overwrite two chips in one move?

How to mark beverage cans in a cooler for a blind person?

How would I as a DM create a smart phone-like spell/device my players could use?

Why is there a need to prevent a racist, sexist, or otherwise bigoted vendor from discriminating who they sell to?

Why are the inside diameters of some pipe larger than the stated size?

How do I explain to a team that the project they will work on for six months will certainly be cancelled?

What are the uses and limitations of Persuasion, Insight, and Deception against other PCs?

Why did the RAAF procure the F/A-18 despite being purpose-built for carriers?

show stdout containing n with line breaks

What does "sardine box" mean?

Generator for parity?

Performance of a branch and bound algorithm VS branch-cut-heuristics

Author changing name

If a Contingency spell has been cast on a creature, does the Simulacrum spell transfer the contingent spell to its duplicate?

How should an administrative assistant reply to student addressing them as "Professor" or "Doctor"?

Can I legally make a real mobile app based on a fictional app from a TV show?

Write an interpreter for *

Double blind peer review when paper cites author's GitHub repo for code

Is it really ~648.69 km/s delta-v to "land" on the surface of the Sun?

English - Acceptable use of parentheses in an author's name

How quickly could a country build a tall concrete wall around a city?



TLS certificate works on Ubuntu 18.04 but not on Centos 7.6


Skype/Spotify Installation Error: Cannot Install libssl1.0.0:i386how to update cURL openssl version for paypal IPNGetting error The openssl extension is required for SSL/TLS protection but is not availableHow to run apache httpd 2.4.6 with a self-signed certificate signed with an elliptic curve key brainpoolP384t1, on CentOS 7.6?Varying a certificate based on client TLS version in ClientHelloCertificate Authority Not Working






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}







0















.6I have a set of keys that authenticate me to some external server.



I am validating if the external server responds, using a Docker image.



This is in GitLab CI script so I am keeping it in that format.



CPI avail Ubuntu:
stage: checkCpiAvailability
image: ubuntu:18.04
script:
- apt update
- apt install -y curl wget unzip openssl openssh-client
- openssl version
- test/bench/curl/curlRequest.sh


When I do it with Ubuntu image, it works.

But when I do the same with Centos 7 image, it fails.



CPI avail Centos7:
stage: checkCpiAvailability
image: centos:7
script:
- yum -y update
- yum -y install curl wget unzip openssl openssh-clients
- openssl version
- test/bench/curl/curlRequest.sh


Error message:



* unable to load client key: -8178 (SEC_ERROR_BAD_KEY)
* NSS error -8178 (SEC_ERROR_BAD_KEY)
* Peer's public key is invalid.
* Closing connection 0
curl: (58) unable to load client key: -8178 (SEC_ERROR_BAD_KEY)


There are questions on SO that solve this error but I wonder whether it's my fault if it's working with the Ubuntu image.



Do I need to install something additional? Or does Centos have some different setup and needs e.g. a passphrase for the keys as I read in one of the answers? How can I make it the same as in Ubuntu?










share|improve this question































    0















    .6I have a set of keys that authenticate me to some external server.



    I am validating if the external server responds, using a Docker image.



    This is in GitLab CI script so I am keeping it in that format.



    CPI avail Ubuntu:
    stage: checkCpiAvailability
    image: ubuntu:18.04
    script:
    - apt update
    - apt install -y curl wget unzip openssl openssh-client
    - openssl version
    - test/bench/curl/curlRequest.sh


    When I do it with Ubuntu image, it works.

    But when I do the same with Centos 7 image, it fails.



    CPI avail Centos7:
    stage: checkCpiAvailability
    image: centos:7
    script:
    - yum -y update
    - yum -y install curl wget unzip openssl openssh-clients
    - openssl version
    - test/bench/curl/curlRequest.sh


    Error message:



    * unable to load client key: -8178 (SEC_ERROR_BAD_KEY)
    * NSS error -8178 (SEC_ERROR_BAD_KEY)
    * Peer's public key is invalid.
    * Closing connection 0
    curl: (58) unable to load client key: -8178 (SEC_ERROR_BAD_KEY)


    There are questions on SO that solve this error but I wonder whether it's my fault if it's working with the Ubuntu image.



    Do I need to install something additional? Or does Centos have some different setup and needs e.g. a passphrase for the keys as I read in one of the answers? How can I make it the same as in Ubuntu?










    share|improve this question



























      0












      0








      0








      .6I have a set of keys that authenticate me to some external server.



      I am validating if the external server responds, using a Docker image.



      This is in GitLab CI script so I am keeping it in that format.



      CPI avail Ubuntu:
      stage: checkCpiAvailability
      image: ubuntu:18.04
      script:
      - apt update
      - apt install -y curl wget unzip openssl openssh-client
      - openssl version
      - test/bench/curl/curlRequest.sh


      When I do it with Ubuntu image, it works.

      But when I do the same with Centos 7 image, it fails.



      CPI avail Centos7:
      stage: checkCpiAvailability
      image: centos:7
      script:
      - yum -y update
      - yum -y install curl wget unzip openssl openssh-clients
      - openssl version
      - test/bench/curl/curlRequest.sh


      Error message:



      * unable to load client key: -8178 (SEC_ERROR_BAD_KEY)
      * NSS error -8178 (SEC_ERROR_BAD_KEY)
      * Peer's public key is invalid.
      * Closing connection 0
      curl: (58) unable to load client key: -8178 (SEC_ERROR_BAD_KEY)


      There are questions on SO that solve this error but I wonder whether it's my fault if it's working with the Ubuntu image.



      Do I need to install something additional? Or does Centos have some different setup and needs e.g. a passphrase for the keys as I read in one of the answers? How can I make it the same as in Ubuntu?










      share|improve this question














      .6I have a set of keys that authenticate me to some external server.



      I am validating if the external server responds, using a Docker image.



      This is in GitLab CI script so I am keeping it in that format.



      CPI avail Ubuntu:
      stage: checkCpiAvailability
      image: ubuntu:18.04
      script:
      - apt update
      - apt install -y curl wget unzip openssl openssh-client
      - openssl version
      - test/bench/curl/curlRequest.sh


      When I do it with Ubuntu image, it works.

      But when I do the same with Centos 7 image, it fails.



      CPI avail Centos7:
      stage: checkCpiAvailability
      image: centos:7
      script:
      - yum -y update
      - yum -y install curl wget unzip openssl openssh-clients
      - openssl version
      - test/bench/curl/curlRequest.sh


      Error message:



      * unable to load client key: -8178 (SEC_ERROR_BAD_KEY)
      * NSS error -8178 (SEC_ERROR_BAD_KEY)
      * Peer's public key is invalid.
      * Closing connection 0
      curl: (58) unable to load client key: -8178 (SEC_ERROR_BAD_KEY)


      There are questions on SO that solve this error but I wonder whether it's my fault if it's working with the Ubuntu image.



      Do I need to install something additional? Or does Centos have some different setup and needs e.g. a passphrase for the keys as I read in one of the answers? How can I make it the same as in Ubuntu?







      centos openssl ssl cryptography






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked 1 hour ago









      Ondra ŽižkaOndra Žižka

      4993 silver badges13 bronze badges




      4993 silver badges13 bronze badges

























          0






          active

          oldest

          votes














          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "106"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: false,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f534948%2ftls-certificate-works-on-ubuntu-18-04-but-not-on-centos-7-6%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Unix & Linux Stack Exchange!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f534948%2ftls-certificate-works-on-ubuntu-18-04-but-not-on-centos-7-6%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Taj Mahal Inhaltsverzeichnis Aufbau | Geschichte | 350-Jahr-Feier | Heutige Bedeutung | Siehe auch |...

          Baia Sprie Cuprins Etimologie | Istorie | Demografie | Politică și administrație | Arii naturale...

          Nicolae Petrescu-Găină Cuprins Biografie | Opera | In memoriam | Varia | Controverse, incertitudini...