In Windows cases you need to merge these files into a PFX file.
Now before I tell you the secret I wish to explain what the difference is between the different files so you know how the certificate works.
•A .csr file is a certificate signing request which initiates your certificate request with a certificate provider and contains administrative information about your organization.
•A .key file is the private key used to encrypt your site’s SSL-enabled requests.
•.pem and .crt extensions are often used interchangeably and are both base64 ASCII encoded files. The technical difference is that .pem files contain both the certificate and key whereas a .crt file only contains the certificate. In reality this distinction is often ignored.
•The PFX extension is used on Windows servers for files containing both the public key files (your SSL certificate files, provided by for instance DigiCert) and the associated private key (generated by your server at the time the CSR was generated).
So in my case I had a crt file for the certificate itself and I had a crt file for the CA and I had the private key within a .key file.
Now I had to “merge” these into a PFX file so I could import it for use for Lync.
Now this is where openssl comes in.
Openssl comes often default with most linux distroes (ubuntu,fedora etc) in my case I had the Netscaler VPX available.
Before you can use openssl on Netscaler you have to type the command shell to enter the regular freebsd shell.
So type the command openssl pkcs12 –export –out certificate.pfx –inkey rsaprivate.key –in certificate.crt –certfile fileca.crt
After that you need to type a password to encrypt the pfx file.
openssl pkcs12 -export -out rmohan.pfx -inkey rmohan.key -in rmohan_com.crt -certfile PositiveSSLCA2.crt
Recent Comments