<p>I have just recieve SSL certificate from Letsencrypt and I want to use it with GKE Ingress. I was using self-signed certificate before and I am a bit confused about file names of my certificates. Here is what i have in /etc/letsencrypt/live/DOMAIN_NAME folder (description from the README):</p>

<ul>
<li><code>privkey.pem</code>  : the private key for your certificate.</li>
<li><code>fullchain.pem</code>: the certificate file used in most server software.</li>
<li><code>chain.pem</code>    : used for OCSP stapling in Nginx >=1.3.7.</li>
<li><code>cert.pem</code>     : will break many server configurations</li>
</ul>

<hr>

<p>And here is what i had before, the keys was created with openssl command below:</p>

<pre><code>openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ./ssl.key -out ./ssl.crt
openssl dhparam -out ./ssl.pem 2048
</code></pre>

<ul>
<li><code>ssl.crt</code></li>
<li><code>ssl.key</code></li>
<li><code>ssl.pem</code></li>
</ul>

<hr>

<p>My question is - which files from the letsencrypt folder should I use?</p>

<ul>
<li><code>ssl.crt</code> -> ?</li>
<li><code>ssl.key</code> -> ?</li>
<li><code>ssl.pem</code> -> ?</li>
</ul>

Zhorzh Alexandr
<p>Trial and error method and a little bit of wikipedia show me that:</p>

<ul>
<li><code>ssl.crt</code> is the same as <code>cert.pem</code></li>
<li><code>ssl.key</code> is the same as <code>privkey.pem</code></li>
<li><code>ssl.pem</code> is DH Params, crypto-something that can be used without changes</li>
</ul>
