The jwtgenerate policy is able to generate token if I use the following private key formats.I'm storing the private key in encrypted KVM and referring that variable in the JWT policy
-----BEGIN RSA PRIVATE KEY-----
....
-----END RSA PRIVATE KEY-----
PKCS#8(unencrypted)
-----BEGIN PRIVATE KEY-----
....
-----END PRIVATE KEY-----
But if I encrypt these keys with passwords and use the encrypted private keys to generate, JWT trace tool shows the following "cannot instantiate private key" error
Encrypted key formats
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4, ENCRYPTED
DEK-Info: AES-256-CBC,1E9B7BE131CB1452DA691AF29A321E4D
-----END RSA PRIVATE KEY-----
PKCS#8(encrypted)
-----BEGIN ENCRYPTED PRIVATE KEY-----
....
-----END ENCRYPTED PRIVATE KEY-----
So,
1. Does JWT policy has any preferred format for the PEM encoded private key
2. Why is it failing to parse the encrypted private key?