Validate Passphrase Error

Issue

The following error appears when attempting to set up an encrypted warehouse key:

Validate Passphrase: It seems your private key is not in correct format. Please copy the key in the exact manner it is generated.

Environment

Destination: Snowflake

Resolution

Make sure that you have added the -v1 <ALGORITHM> to the command. If your security team doesn't have a recommendation, go with PBE-SHA1-3DES.

To generate an encrypted version, use the following command:

openssl genrsa 2048 | openssl pkcs8 -topk8 -v1 <ALGORITHM> -inform PEM -out rsa_key.p8

Various algorithms can be used with the -v1 command line option. These algorithms use the PKCS#12 password-based encryption algorithm and allow strong encryption algorithms like triple DES or 128-bit RC2 to be used.

PBE-SHA1-RC4-128, PBE-SHA1-RC4-40, PBE-SHA1-3DES, PBE-SHA1-2DES, PBE-SHA1-RC2-128 andPBE-SHA1-RC2-40

Cause

An encryption algorithm was not specified when creating the key.