Topic
Download, Install and Generate PEM/CRT/KEY files using OPENSSL
Instructions
1- Download and install openssl following EXE file (other methods may be available, feel free to use them instead)
Win32/Win64 OpenSSL Installer for Windows - Shining Light Productions
2- After installation, double click installation file and follow the installation process. At the following screen, select highlighted option:
3- After completing the installation, navigate to below folder:
C:\Program Files\OpenSSL-Win64\bin
Copy paste PFX file here for easy navigation to certificate file.
Next, right click and run the “Openssl.exe” as administrator.
4- Type the command below to generate a .txt file:
pkcs12 -in C:\PathToThePFXfile\myPFXfileName.pfx -out certificate.txt -nodes
In the case below the PFX file is in the same bin folder, execute the command as shown.
After entering the above command, the command prompt will ask for a password, copy and paste it from the text file shown in earlier steps.
5- After executing above command it will generate a certificate.txt file in the same directory. Open it in notepad++.
6- After opening the file you will be able to see the following pattern 5 times.
----- Begin Certificate -----
loremipsum loremipsum
loremipsum loremipsum
loremipsum loremipsum
----- End Certificate -----
7- These are the patterns which are required for PD installations, as explained in next step.
8- These patterns will create the PEM/CRT/KEY files,
>> First pattern mentioned in step 6 is the CRT file, copy only that pattern and save it in a new text file as “certificate.pem” and “certificate.crt”
>> Last or 5th pattern mentioned in step 6 is the KEY file, copy only that pattern and save it in a new text file as “key.pem” and “Key.key”
>> Remaining or 2nd 3rd and 4th pattern mentioned in step 6 is the ca-bundle file, copy only those patterns as shown below:
----begin certificate-----
xyzzyz
-----end certificate ------
----begin certificate-----
xyzzyz
-----end certificate ------
----begin certificate-----
xyzzyz
-----end certificate ------
Save it in a new text file as “ca-bundle.pem”
Now you have generated all required PEM/CRT/KEY files required for SSL configuration.
You can name the files as appropriate for your environment:
