[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 843
  • Last Modified:

PCKS7 and PEM

Has anyone had any experience with a pkcs7 file? I need a PEM certificate file to upload to my load balancer for ssl. I honestly dont ' know know what a PEM file is or what a pcks7 file, but from my research on the web it seems pkcs7  encodes the pem file. Through windows I was able to export two .cer files from the pkcs 7file (I chose 64bit based encoding). Now I believe that the 2 .cer files that I exported are the PEM files that I need to upload. Does this make sense to anyone?  
0
ShadowColossus
Asked:
ShadowColossus
  • 4
  • 3
1 Solution
 
CLozCommented:
Which loadbalancer are you using?  Many use Linux Kernal and have openssl loaded on them.  Us can use the following command to convert the pkcs file to pem:

opensll -pkcs# -in cert.pfx -out cert.pem -passin pass:password -nodes

You can do a man on openssl to get the switches that apply for your situation.
0
 
CLozCommented:
It might be easier to create a pkcs12 format from your IIS server and then translate the using openssl.
0
 
ShadowColossusAuthor Commented:
i'm using a serveriron 4g-ssl. the certificate is not installed on the IIS server, i thought it should be installed on the load balancer since ssl connection will terminate at the load balancer. Does the conversion of the pkcs12 to pem, extract the private key and the certificate?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
CLozCommented:
Yes it does.  You will need the pass key used during the creation on the csr, thats if one was used to create it.  
0
 
ShadowColossusAuthor Commented:
ok i'm thinking of maybe installing the certificate in IIS then export the certificate and the private key. after that install it onto the load balancer.
0
 
CLozCommented:
That should work.  

If IIS doesnt let you do it. You will probably need to export it to PKCS12, convert it and the PEM file will contain the cert and key.  If your loadbalancer doesnt have openssl on it you can download Knoppix which is a boot CD of linux.  You can use it to run openssl for the conversion.
0
 
ShadowColossusAuthor Commented:
thanks for the help CLoz
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now