I am trying to update the certificate for my application but it is not working

Question

I am trying to update the certificate that have expired. Using Keyfactor, I created the .PFX file and imported to key vault successfully.

I also added the .PEM (private key) to the application. I did not get any errors and assume it was applied successfully.

However I do not see the private key associated with the public key when I use kubectl command.

I can see for the previous ones but not for this.

Appreciate any help,

Thanks

Ram

Answer 1

Hello RAMESH, RAM

It seems your private key is not being properly associated with the public key after importing the certificate into your application using Kubernetes.
Try to

• Make sure that your generated certificate contains both the public and private keys.
• Make sure that secret associated with your application has both the certificate and the private key: kubectl get secret <secret-name> -o yamlor tls.crt (certificate) and tls.key (private key) in the output.
• Verify the secret is correctly mounted in your pod/deployment.
• Confirm that the latest certificate version is being used from the Key Vault.
• Inspect Kubernetes logs and ensure correct permissions are granted.