.pem certificate not accepted by mac Keychain

0

I am using AWS Cloud Services, when I create an EC2 instance Amazon automatically generates a Security Certificate in .pem file extension, it downloads to my mac computer, when I click it or try and import it to Keychain, there is an error. Terminal commands editor can open the file, but I am not sure how to detect corrupt data. I used Homebrew to try and convert the file to .12, that will not work. Any ideas?

Thanks, TJ

tjjeff
asked a year ago1491 views
2 Answers
0

Hi there, the pem file will be the key required to ssh to the ec2. You will not be able to import key chain, you’ll have to use an ssh terminal program and specify this key when connecting.

Please see how to ssh from a Linux box and follow the instructions

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html

profile picture
EXPERT
answered a year ago
0

Gary,

chmod 600 us-east-kp.pem ... returns 'no such file for directory' ... i imagine that .pem might be an issue, would you suggest a good way to convert the file to .12 which I believe is better on mac, thoughts?

tjjeff
answered a year ago
  • Sounds like you’re not in the same directory as the pem file, don’t have access or the file is called something different. If you perform an ls can you see the file? You don’t need a p12 file. Both your messages say file not found. That maybe the issue here. ls the directory and see what the file name is

  • Gary, thx for the feedback. See below the terminal command entries, as you can see the file is visible in downloads. FYI My keychain will still not accept the file. Below I give a chmod command to make sure I have permissions, then execute an ssh connect, but i am denied permission.

    "tj downloads % ls us-east-kp1.pem us-east-kp1.pem tj downloads % chmod 400 us-east-kp1.pem tj downloads % ssh -i "us-east-kp1.pem" ec2-user@ec2-xx-xxx-x-xxx.compute-1.amazonaws.com

    "ec2-user@ec2-xx-xxx-x-xxx.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic). tj downloads %"

    Your thoughts?

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions