WoSign certificates - why are there no .key files?

Question

Nginx

Good time.
Got archives from WoSign and none of them have .key files, only .crt files. Nginx accordingly swears at such a config without .key:

nginx: [emerg] no "ssl_certificate_key" is defined for the "ssl" directive in /etc/nginx/conf.d/ssl.conf:23
nginx: configuration file /etc/nginx/nginx.conf test failed

Is this normal for WoSign?

Answer 1

This is normal for everyone.
.crt files - signed public certificate + public keys of the certification authority.
The .key file is a private key that you shouldn't have sent anywhere. It should be on your server, in the same place where you generated the certificate request.
And accordingly, in the nginx config, you must specify the path to this file in the ssl_certificate_key directive.