> From: owner-openssl-us...@openssl.org On Behalf Of Ruiyuan Jiang > Sent: Thursday, 13 October, 2011 18:13
> I have a certificate generated with RSA format for Apache web server. > Now I have a need to convert the key and cert or generate a new key, > csr with same URL name using PK12 format to migrate to MS Windows > platform. Can anyone help me? Thanks. man pkcs12 # may need MANPATH if not installed systemwide http://www.openssl.org/docs/apps/pkcs12.html# Note: what you have is an RSA key (or more exactly keypair) and cert in *PEM* format. You can copy them to a PKCS12, but they remain the same RSA key and cert now in PKCS12 format. If you got the cert from a (real or fake) CA, using a CSR, you may wish to include the CA cert(s) in the PKCS12. If it is a well-known public CA, the cert(s) are probably already in the Windows store (unless it's DigiNotar!!), but if it is private or new or otherwise uncertain it might be more convenient to have the CA cert(s) in the PKCS12. OTOH you can always copy them separately if needed. The CSR itself, if you used one, is no longer needed. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
