If you have a PFX file that contains a private key with a password, you can use OpenSSL to extract the private key without a password into a separate file, or create a new PFX file without a password. Get the Private Key from the key-pair #openssl rsa -in sample.key -out sampleprivate.key to the CA, they will return a signed certificate which. Generate Openssl Key Without Password Key Openssl Generate Password While Encrypting a File with a Password from the Command Line using OpenSSLis very useful in its own right, the real power of the OpenSSL library is itsability to support the use of public key cryptograph for encrypting orvalidating data in an unattended manner (where the.

Write down the Common Name (CN) for your SSL Certificate. The CN is the fully qualified. $ cat 'NewKeyFile.key' 'certificate.crt' 'ca-cert.ca' PEM.pem And create the new file: $ openssl pkcs12 -export -nodes -CAfile ca-cert.ca -in PEM.pem -out 'NewPKCSWithoutPassphraseFile' Now you have a new PKCS12 key file without passphrase on the private key part. A password-less RSA private key in server.key. Openssl req -nodes -new -x509 -keyout server.key -out server.cert Here is how it works. Omitting -des3 as in the answer by @MadHatter is not enough in this case to create a private key without passphrase. How do I do that with openssl?

In this article you’ll find how to generate CSR (Certificate Signing Request) using OpenSSL from the Linux command line, without being prompted for values which go in the certificate’s subject field.

Below you’ll find two examples of creating CSR using OpenSSL.

In the first example, i’ll show how to create both CSR and the new private key in one command.

And in the second example, you’ll find how to generate CSR from the existing key (if you already have the private key and want to keep it).

Both examples show how to create CSR using OpenSSL non-interactively (without being prompted for subject), so you can use them in any shell scripts.

Create CSR and Key Without Prompt using OpenSSL

Use the following command to create a new private key 2048 bits in size example.key and generate CSR example.csr from it:

Option	Description
openssl req	certificate request generating utility
-nodes	if a private key is created it will not be encrypted
-newkey	creates a new certificate request and a new private key
rsa:2048	generates an RSA key 2048 bits in size
-keyout	the filename to write the newly created private key to
-out	specifies the output filename
-subj	sets certificate subject

Generate CSR From the Existing Key using OpenSSL

Use the following command to generate CSR example.csr from the private key example.key:

Option	Description
openssl req	certificate request generating utility
-new	generates a new certificate request
-key	specifies the file to read the private key from
-out	specifies the output filename
-subj	sets certificate subject

Automated Non-Interactive CSR Generation

The magic of CSR generation without being prompted for values which go in the certificate’s subject field, is in the -subj option.

-subj arg

Replaces subject field of input request with specified data and outputs modified request. The arg must be formatted as /type0=value0/type1=value1/type2=…, characters may be escaped by (backslash), no spaces are skipped.

The fields, required in CSR are listed below:

Field	Meaning	Example
/C=	Country	GB
/ST=	State	London
/L=	Location	London
/O=	Organization	Global Security
/OU=	Organizational Unit	IT Department
/CN=	Common Name	example.com

You’ve created encoded file with certificate signing request.

Now you can decode CSR to verify that it contains the correct information.

For those running macOS or Linux, I've created a Bash script to automate the process, which you can download from GitHub. You set the PFX_PASSWORD and PFX_FILE_IN variables at the top of the file with your own values, and don't forget to make it executable by running chmod +x pfx-remove-password.sh in Terminal.

For those running Windows, you can download OpenSSL for Windows binaries from SourceForge.

The manual instructions are below.

Generate Openssl Key Without Password Online

If you only want the private key file, you can skip steps 5 and 6.

If you want a PFX file with no password, you can delete TargetFile.Key when you're finished.

MyPassword is your current password
SourceFile.PFX is the PFX file you want to convert
TargetFile.Key is the name of the private key file without a password that will be generated
TargetFile.PFX is the name of the PFX file without a password that will be generated

1. Extract the certificate:

2. Extract the certificate authority key:

Generate Openssl Key Without Password Free

3. Extract the private key:

4. Remove the passphrase from the private key file:

5. Create a new input file to generate a PFX file:

6. Generate a new PFX file without a password:

And that's it. For an input file named test-cert.pfx, you'll now have a private key file named test-cert.nopassword.key and a PFX file named test-cert.nopassword.pfx.

Reference: Serverfault