| Page Properties |
|---|
...
|
Objective
Today SSL certificates are managed in several different places which makes updating existing certificates and issuing new certificates difficult and prone to errors. We currently have three separate certificate processes. Java based backend services use a password protected local key store to house certificates. The key store is maintained as part of the development code line and is distributed as part of the software’s package. Java services include:
...
Question | Answer | Date Answered |
|---|---|---|
Out of Scope
SSL Run-Book
Convert DER to PEM Format
This process must be performed on a machine with OpenSSL installed. File extension might be .cer, .crt, or .der for the source file.
For each certificate file in DER format run the command
openssl x509 -in original.cer -inform der -outform pem -out new_name.cer
Convert Individual Certificates into .p7b
This process must be performed on a machine with OpenSSL installed
Ensure certificate files are in PEM format by opening in a text editor. If the file appears to have special characters or does not start with “-----BEGIN CERTIFICATE-----” it is in the DER format and needs converted. See Convert DER to PEM Format before proceeding.
openssl crl2pkcs7 -nocrl -certfile certificate.cer -certfile intermediate.cer -out certificate.p7b