Encrypted indicates that the private key is a PKCS #8 encrypted private key. At this time, CFSSL does not support decrypting these keys.
case ParseFailed: msg = "Failed to parse private key" case Encrypted: msg = "Private key is encrypted." case NotRSAOrECC:
return x509.DecryptPEMBlock(keyDER, password) } return nil, cferr.New(cferr.PrivateKeyError, cferr.Encrypted) } }