.pem certificate not accepted by mac Keychain

0

I am using AWS Cloud Services, when I create an EC2 instance Amazon automatically generates a Security Certificate in .pem file extension, it downloads to my mac computer, when I click it or try and import it to Keychain, there is an error. Terminal commands editor can open the file, but I am not sure how to detect corrupt data. I used Homebrew to try and convert the file to .12, that will not work. Any ideas?

Thanks, TJ

tjjeff
已提問 1 年前檢視次數 1552 次
2 個答案
0

Hi there, the pem file will be the key required to ssh to the ec2. You will not be able to import key chain, you’ll have to use an ssh terminal program and specify this key when connecting.

Please see how to ssh from a Linux box and follow the instructions

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html

profile picture
專家
已回答 1 年前
0

Gary,

chmod 600 us-east-kp.pem ... returns 'no such file for directory' ... i imagine that .pem might be an issue, would you suggest a good way to convert the file to .12 which I believe is better on mac, thoughts?

tjjeff
已回答 1 年前
  • Sounds like you’re not in the same directory as the pem file, don’t have access or the file is called something different. If you perform an ls can you see the file? You don’t need a p12 file. Both your messages say file not found. That maybe the issue here. ls the directory and see what the file name is

  • Gary, thx for the feedback. See below the terminal command entries, as you can see the file is visible in downloads. FYI My keychain will still not accept the file. Below I give a chmod command to make sure I have permissions, then execute an ssh connect, but i am denied permission.

    "tj downloads % ls us-east-kp1.pem us-east-kp1.pem tj downloads % chmod 400 us-east-kp1.pem tj downloads % ssh -i "us-east-kp1.pem" ec2-user@ec2-xx-xxx-x-xxx.compute-1.amazonaws.com

    "ec2-user@ec2-xx-xxx-x-xxx.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic). tj downloads %"

    Your thoughts?

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南