Extract .pfx to gernerate private key and certificate

This Guide provides how to extract .pfx and generate private key and certificate to import in to the server like Apache 

Export the private key file from the pfx file

shell>> openssl pkcs12 -in filename.pfx -nocerts -out key.pem

Export the certificate file from the pfx file

shell>> openssl pkcs12 -in filename.pfx -clcerts -nokeys -out cert.pem

Remove the passphrase from the private key

shell>> openssl rsa -in key.pem -out server.key


Now you have generated the certificate ( cert.pem ) and the private key ( server.key ) from the .pfx file.

Note : It is better if you are familier with these file formats.

.csr 

This is a Certificate Signing Request. Some applications can generate these for submission to certificate-authorities. It includes some/all of the key details of the requested certificate such as subject, organization, state, whatnot. These get signed by the CA and a certificate is returned. The returned certificate is the public certificate, which itself can be in a couple of formats.
 
.pem 

This is the public-key of a specific certificate. In apache installs, this frequently resides in /etc/ssl/servercerts. This is also the format used for Certificate Authority certificates (/etc/ssl/certs). key This is the private-key of a specific certificate. In apache installs, this frequently resides in /etc/ssl/private. The rights on this directory and the certificates is very important, and some programs will refuse to load these certificates if they are set wrong.

.pkcs12 .pfx .p12 

A passworded container format that contains both public and private certificate pairs. Every time I get one I have to google to remember the openssl-fu required to break it into .key and .pem files.
 
.der 

Fills the same function as a .pem file, but a different format. OpenSSL can convert these to .pem. I've only ever run into them in the wild with Novell's eDirectory certificate authority.
 
.cert .cer 

A .pem file with a different extension. This extension is recognized by Windows Explorer as a certificate, which .pem is not.
 
.crl 

A certificate revocation list. Certificate Authorities produce these as a way to de-authorize certificates before expiration.

Good luck.........!!!!!!!!!!!

Comments

Post a Comment

Leave a message

Popular posts from this blog

Installation of MySQL Enterprise Monitor Agent on Linux

If you are new reader, kindly note that this post contains it's first part on post   "Installation of MySQL Enterprise Server Manager" . As the second step as mySQL monitor installation we need to install the monitoring agent for each instance. So in order to accomplish that we first need to create a user and grant relevent permission to that user. Create agent user on mySQL mysql> CREATE USER 'mysqlagnt'@'localhost' IDENTIFIED BY 'agentpass';   mysql> GRANT SELECT, REPLICATION CLIENT, SHOW DATABASES, SUPER, PROCESS  ON *.* TO 'mysqlagnt'@'localhost' IDENTIFIED BY 'agentpass';  mysql> GRANT CREATE, INSERT ON mysql.* TO 'mysqlagnt'@'localhost' IDENTIFIED BY 'agentpass';     mysql> GRANT SELECT ON mysql.inventory TO 'replicationuser'@'%' IDENTIFIED BY 'replication_password'; NOTE : SET SQL_LOG_BIN=0 to stop replicating the below ...
Read more

Installation and Configuration of Cisco VPN Client on Linux

Installation of Cisco VPN client on Linux is something quiet easy. You just need to download the installation file. Extract it using shell>> tar zxvf vpnclient-linux-x86_64-4.8.01.0640-k9.tar.gz Move inside the vpnclient folder created after extracting the tarball using shell>> cd vpnclient Run the executable file vpn_install using shell>> ./vpn_install Provide necessary locations or confirm the defaults. Start the service using shell>> /etc/init.d/vpnclient_init start Copy the configuration file ( *.pcf ) or edit the existing sample.pcf file accordingly in the path of the profile folder. E.g : mine is /etc/CiscoSystemsVPNClient/profiles/sample.pcf After changing the or placing the new configuration file restart the vpn client using shell>> /etc/init.d/vpnclient_init restart And connect to the vpn using shell>> vpnclient connect sample ( if you have provide another name instead of sample to the .pcf file use that name...
Read more

Oracle Startup Issues ORA-16038

Image
ORA-16038: log 1 sequence# 244 cannot be archived  ORA-19809: limit exceeded for recovery files  ORA-00312: online log 1 thread 1  There is a possibility to encounter this issue in oracle database and when this happens you wont be able to open the database. you will be getting this once the  db_recovery_file_dest_size   value  gets exceeded.  However you can fix this one by increasing the  db_recovery_file_dest_size   or by clearing the  obsolete files. To increase the  db_recovery_file_dest_size   size use the following steps. 
Read more