Error message creating .pfx

[retechp]

Hi group, I am getting this error message when trying to create a pfx file.

I have LEGO installed on my QNAP and I can create the SSL cert but when I try to export it, this message appears. Can anyone help me understand what is the problem?

I also have confirmed the path to the certs

$ openssl pkcs12 -export -out /share/Web/.lego/certificates/.lego/mds_certificate.pfx -inkey /share/Web/.lego/certificates/.lego/_.mydexxx.com.key -in /share/Web/.lego/certificates/.lego/_.mydexxx.com.issuer.crt -certfile /share/web/.lego/certificates/.lego/_.mydexxx.co>
Could not open file or uri for loading private key from -inkey file from /share/Web/.lego/certificates/.lego/_.mydexxx.com.key
69876877E27F0600:error:16060060: STORE routines: (unknown function):unregistered scheme:crypto/store/store_register.c:237:scheme=file
00376577E27F0000:error:80000002 system Library: (unknoun function):No such file or directory:providers/implementations/storengnt/file_store.c:267:calling stat(/share/Web/.lego/certificates/.lego/_.mydexxx.com.key)
$

[ldez]

Hi,

This error is not a lego error.

The error only says that /share/Web/.lego/certificates/.lego/_.mydexxx.com.key file is missing.

[retechp]

Thanks. I went cross-eyed looking at the command and found I had an extra character and removed the under score.

Now I get this error. Is this lego or openSSL?

Could not read any extra certificates from -certfile from /share/Web/.lego/certificates/.lego/certificates/mydev-xxx.com.issuer.crt

[[email protected] certificates]$ [email protected] CLOUDFLARE_API_KEY=12345678 lego --email [email protected] --dns cloudflare --dns.resolvers 208.67.222.222 -d '*.mydev-xxx.com' -d mydev-xxx.com run
2025/06/03 11:48:29 [INFO] [*.mydev-xxx.com, mydev-xxx.com] acme: Obtaining bundled SAN certificate
2025/06/03 11:48:29 [INFO] [*.mydev-xxx.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/12345/54321
2025/06/03 11:48:29 [INFO] [mydev-xxx.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/12345/54321
2025/06/03 11:48:29 [INFO] [mydev-xxx.com] acme: authorization already valid; skipping challenge
2025/06/03 11:48:29 [INFO] [*.mydev-xxx.com] acme: use dns-01 solver
2025/06/03 11:48:29 [INFO] [*.mydev-xxx.com] acme: Preparing to solve DNS-01
2025/06/03 11:48:30 [INFO] cloudflare: new record for [mydev-xxx.com](http://mydev-xxx.com/), ID 0123456789
2025/06/03 11:48:30 [INFO] [*.mydev-xxx.com] acme: Trying to solve DNS-01
2025/06/03 11:48:30 [INFO] [*.mydev-xxx.com] acme: Checking DNS record propagation. [nameservers=208.67.222.222:53]
2025/06/03 11:48:32 [INFO] Wait for propagation [timeout: 2m0s, interval: 2s]
2025/06/03 11:48:32 [INFO] [*.mydev-xxx.com] acme: Waiting for DNS record propagation.
2025/06/03 11:48:34 [INFO] [*.mydev-xxx.com] acme: Waiting for DNS record propagation.
2025/06/03 11:48:41 [INFO] [*.mydev-xxx.com] The server validated our request
2025/06/03 11:48:41 [INFO] [*.mydev-xxx.com] acme: Cleaning DNS-01 challenge
2025/06/03 11:48:41 [INFO] [*.mydev-xxx.com, mydev-xxx.com] acme: Validations succeeded; requesting certificates
2025/06/03 11:48:41 [INFO] [*.mydev-xxx.com] Server responded with a certificate.
[[email protected] certificates]$ ls
_.mydev-xxx.com.crt _.mydev-xxx.com.issuer.crt mydev-xxx.com.issuer.crt _.mydev-xxx.com.json _.mydev-xxx.com.key
[[email protected] certificates]$ openssl pkcs12 -export -out /share/Web/.lego/certificates/.lego/certificates/mds.pfx -inkey /share/Web/.lego/certificates/.lego/certificates/_.mydev-xxx.com.key -in /share/Web/.lego/certificates/.lego/certificates/_.mydev-xxx.com.crt -certfile /share/Web/.lego/certificates/.lego/certificates/mydev-xxx.com.issuer.crt
Could not read any extra certificates from -certfile from /share/Web/.lego/certificates/.lego/certificates/mydev-xxx.com.issuer.crt
[[email protected] certificates]$

[ldez]

still related to OpenSSL

[retechp]

Thanks and I think I went down the wrong rabbit hole LOL.

It appears that Lego can make pfx files so I will post a topic about this.