PCKS7 and PEM

Has anyone had any experience with a pkcs7 file? I need a PEM certificate file to upload to my load balancer for ssl. I honestly dont ' know know what a PEM file is or what a pcks7 file, but from my research on the web it seems pkcs7  encodes the pem file. Through windows I was able to export two .cer files from the pkcs 7file (I chose 64bit based encoding). Now I believe that the 2 .cer files that I exported are the PEM files that I need to upload. Does this make sense to anyone?  
ShadowColossusAsked:
Who is Participating?
 
CLozConnect With a Mentor Commented:
That should work.  

If IIS doesnt let you do it. You will probably need to export it to PKCS12, convert it and the PEM file will contain the cert and key.  If your loadbalancer doesnt have openssl on it you can download Knoppix which is a boot CD of linux.  You can use it to run openssl for the conversion.
0
 
CLozCommented:
Which loadbalancer are you using?  Many use Linux Kernal and have openssl loaded on them.  Us can use the following command to convert the pkcs file to pem:

opensll -pkcs# -in cert.pfx -out cert.pem -passin pass:password -nodes

You can do a man on openssl to get the switches that apply for your situation.
0
 
CLozCommented:
It might be easier to create a pkcs12 format from your IIS server and then translate the using openssl.
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
ShadowColossusAuthor Commented:
i'm using a serveriron 4g-ssl. the certificate is not installed on the IIS server, i thought it should be installed on the load balancer since ssl connection will terminate at the load balancer. Does the conversion of the pkcs12 to pem, extract the private key and the certificate?
0
 
CLozCommented:
Yes it does.  You will need the pass key used during the creation on the csr, thats if one was used to create it.  
0
 
ShadowColossusAuthor Commented:
ok i'm thinking of maybe installing the certificate in IIS then export the certificate and the private key. after that install it onto the load balancer.
0
 
ShadowColossusAuthor Commented:
thanks for the help CLoz
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.