I am trying to enable Https for the nx-api’s running on nginx server on cisco switch.
Now in-order to generate SSL keys for this ideal way is to use openssl. Now openssl is not available on Cisco switch and few manuals suggests to run openssl commands outside of the switch to generate the keys. But this approach is not feasible as private key is compromised as its created outside of the switch.
The other approach I am following up is setup CA, Trust-point etc on cisco switch and ultimately I am able export the certificate in pkcs12 format which contains (private key and certs etc). But for enable Https on Nginix it requires private key and certificate as separate files. Now the issue is how can I extract private keys from the above exported pkcs12 file. I don't see an option to get the private key. Below is the manual from Cisco I have followed in this process.
Any help on this is much appreciated.
Thanks,
Siva.
