#################################################### #convert IIS certs to openSSL ones for Apache to use # openssl is installed with Apache by default. # #created May 24, 2010 #Bryan Loveless # # Write-host "This script assumes you have openssl installed in the C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin Directory And your certs are in the C:\Program Files (x86)\Apache Software Foundation\Apache2.2\certs Directory" #################################################### Set-Location "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin" $OrgCert=Read-Host "What is the name of your cert? (Include the .pfx)" $NewCert= Read-Host "What do you want to name the new one? (Include the .pem) Normally it is apache.key.pem" $NewKey= Read-Host "What do you want to name the new one? (Include the .key) Normally it is apache.key" $newkey2= Read-Host "What do you want to name the new one? (Include the .pem) Normally it is apache.cert.pem" #PS C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin> .\openssl.exe pkcs12 -in ..\certs\$OrgCert -nocerts -out ..\certs\$NewCert -nodes #Enter Import Password: #MAC verified OK #Enter PEM pass phrase: #Verifying - Enter PEM pass phrase: #PS C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin> .\openssl.exe pkcs12 -in ..\certs\$OrgCert -clcerts -nokeys -out $newkey2 #Enter Import Password: #PS C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin> .\openssl.exe rsa -in ..\certs\$NewCert -out ..\certs\$NewKey #Enter pass phrase for ..\certs\apache.key.pem: #writing RSA key for converting the chain #OpenSSL Convert P7B # #Convert P7B to PEM # #openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer # #Convert P7B to PFX # #openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer # #openssl pkcs12 -export -in certificate.cer -inkey privateKey.key -out certificate.pfx -certfile CACert.cer #OpenSSL Convert PFX # #Convert PFX to PEM # #openssl pkcs12 -in certificate.pfx -out certificate.cer -nodes
If I spend some time figuring out something that might help others, and hasn't been found on the Internet by me, I will post about it. I hope to save some poor IT guy or gal some time.
Showing posts with label apache. Show all posts
Showing posts with label apache. Show all posts
Friday, August 27, 2010
Convert an IIS cert to an apache one
Here is a simple powershell script I wrote to convert a "iis" cert to one that apache is happy with to use with SSL:
Labels:
apache,
certificate,
powershell,
work
Subscribe to:
Posts (Atom)