Certificate creation failed: The public/private key pair in the certficates do not match.

[martinbu]

I have an issue with the NetCoreConsoleServer from this repo. If I execute the server on an embedded Linux arm system I get the Exception:

NotSupportedException("Creating X509Certificate from PKCS #12 store failed", ex);
with the inner exception (ex) System.Security.Cryptography.CryptographicException("The public/private key pair in the certficates do not match.")

in CertificateFactory.cs#442

In the terminal where I start the NetCoreConsoleServer, also the following lines are printed:

root@am437x-evm:~/test/opcua-server# ./NetCoreConsoleServer
.Net Core OPC UA Console Server sample
Enter key to continue booting
cryptodev_digest_update: illegal inputs
cryptodev_digest_update: illegal inputs
Exception: One or more errors occurred. (Creating X509Certificate from PKCS #12 store failed)

Does the linux image that is used is missing some libraries or libraries in the correct version? Maybe anyone has a hint...

My system: Linux am437x-evm 4.9.69-g9ce43c71ae #1 PREEMPT Mon Mar 26 12:08:26 EDT 2018 armv7l GNU/Linux

[martinbu]

I cloud reslove this issue. The message "cryptodev_digest_update: illegal inputs" is caused by the libssl/libcrypto library of my embedded linux system. The installed versions of both libraries are 1.0.0.

To resolve the issue I additionally copied libssl.so.1.0.2 and libcrypto.so.1.0.2 from a raspberry pi image to /usr/lib of my embedded linux system. Because NetCore 2.1 first tries to load version 1.0.2 (see PR everything works fine afterwards.