This shows you the differences between two versions of the page.
linux:ssl_create_pcf [2019/09/30 10:33] admin created |
linux:ssl_create_pcf [2019/09/30 10:35] (current) admin |
||
---|---|---|---|
Line 26: | Line 26: | ||
* -in certificate.crt – use certificate.crt as the certificate the private key will be combined with. | * -in certificate.crt – use certificate.crt as the certificate the private key will be combined with. | ||
* -certfile more.crt – This is optional, this is if you have any additional certificates you would like to include in the PFX file. | * -certfile more.crt – This is optional, this is if you have any additional certificates you would like to include in the PFX file. | ||
- | * | + | |
+ | |||
+ | ===== PKCS#7/P7B (.p7b, .p7c) to PFX ===== | ||
+ | |||
+ | P7B files cannot be used to directly create a PFX file. P7B files must be converted to PEM. Once converted to PEM, follow the above steps to create a PFX file from a PEM file. | ||
+ | |||
+ | <code bash> | ||
+ | openssl pkcs7 -print_certs -in certificate.p7b -out certificate.crt | ||
+ | </code> | ||
+ | |||
+ | Breaking down the command: | ||
+ | |||
+ | * openssl – the command for executing OpenSSL | ||
+ | * pkcs7 – the file utility for PKCS#7 files in OpenSSL | ||
+ | * -print_certs -in certificate.p7b – prints out any certificates or CRLs contained in the file. | ||
+ | * -out certificate.crt – output the file as certificate.crt | ||
+ |