SSL: Difference between revisions

From miki
Jump to navigation Jump to search
(Created page with '== Checking Certificate Chain with OpenSSL == [http://langui.sh/2009/03/14/checking-a-remote-certificate-chain-with-openssl/ Checking A Remote Certificate Chain With OpenSSL]')
 
Line 1: Line 1:
== Checking Certificate Chain with OpenSSL ==
== Checking Certificate Chain with OpenSSL ==
[http://langui.sh/2009/03/14/checking-a-remote-certificate-chain-with-openssl/ Checking A Remote Certificate Chain With OpenSSL]
[http://langui.sh/2009/03/14/checking-a-remote-certificate-chain-with-openssl/ Checking A Remote Certificate Chain With OpenSSL]

== Change .p12 / .pfx password ==
Say you have a private key / certificate file <tt>mycert.pfx</tt>, and you want to change its password:
<source lang=bash>
# Use -nodes (no DES) to produce a .pem file without encrypting the private key at all
openssl pkcs12 -in mycert.pfx -nodes | openssl pkcs12 -export -out mycert-new.pfx
</source>
For information, the output of the first ''pkcs12'' invocation parses the pkcs#12 file into a format called '''.pem'''. So one can also produce a pkcs12 file from a .pem file with:
<source lang=bash>
openssl pkcs12 -export -in mycert.pem -out mycert-new.pfx
</source>

Revision as of 22:00, 29 February 2012

Checking Certificate Chain with OpenSSL

Checking A Remote Certificate Chain With OpenSSL

Change .p12 / .pfx password

Say you have a private key / certificate file mycert.pfx, and you want to change its password:

# Use -nodes (no DES) to produce a .pem file without encrypting the private key at all
openssl pkcs12 -in mycert.pfx -nodes | openssl pkcs12 -export -out mycert-new.pfx

For information, the output of the first pkcs12 invocation parses the pkcs#12 file into a format called .pem. So one can also produce a pkcs12 file from a .pem file with:

openssl pkcs12 -export -in mycert.pem -out mycert-new.pfx