On February 4, 2010 11:38:36 am Dan Letkeman wrote: > Ok, when I try to import it into Internet Explorer and I get this > error: "The file type is not recognizable. Select another file" > That's really strange - although it SHOULDN'T make an iota of difference, rename your .p12 to .pfx, and see what happens.
> So i'm guessing I did something wrong. The CA certificate for the > company we bought the certificate from is already in the Astaro and in > Internet Explorer's CA list. > > I just combined the certificate and our key on a linux box that has > openssl. > > openssl -pkcs12 -in proxy.pem -inkey proxy.key -export -out proxy.p12 > Well, aside from the extra - in front of the pkcs12, this looks right. Just for fun try re-ordering the commands - again, it SHOULDN'T make a difference, but you never know :) openssl pkcs12 -export -in proxy.pem -inkey proxy.key -out proxy.p12 How are you transfering the file around? perhaps your getting some form of corruption during your file transfer? What happens if you immediately try and re-parse the PKCS12 file on the same Linux box? openssl pkcs12 -in proxy.p12 -info -clcerts Have fun. Patrick. > > On Thu, Feb 4, 2010 at 9:08 AM, Patrick Patterson > > <ppatter...@carillonis.com> wrote: > > On February 3, 2010 05:57:36 pm Dan Letkeman wrote: > >> The server i'm trying to import it into is and Astaro Firewall. > >> www.astaro.com. I have also just tried to import it into Internet > >> Explorer on Windows XP and I get an error. > > > > Again - what error do you get - just saying that you get an error doesn't > > really help us to help you. > > > >> The Astaro only takes PKCS12 files. > > > > Ok - do you need to configure any sort of CA certificate? What values > > does the Astaro require in the certificate? > > > > -- > > Patrick Patterson > > President and Chief PKI Architect, > > Carillon Information Security Inc. > > http://www.carillon.ca > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List openssl-users@openssl.org > > Automated List Manager majord...@openssl.org > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org -- Patrick Patterson President and Chief PKI Architect, Carillon Information Security Inc. http://www.carillon.ca ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
