3 ms·
Can you educate me? Are you saying that using something like 'openssl x509' to export a certificate as PKCS12 to import into my browser is a bad thing?
by luser001 15y ago
Can you educate me? Are you saying that using something like 'openssl x509' to export a certificate as PKCS12 to import into my browser is a bad thing?
- alexchamberlain 15y agoI'm not sure I fully understand. However, if the private key ever leaves your computer, it's a Bad Thing.
- luser001 15y agoHmm, what I described above is how a client certificate signed by a certificate authority is created. Random site that describes the procedure is below. What is the right way to do this? Exporting the private key of the certificate Enter the password of the private key, and then export the client key onto the generated client certificate using the following command: openssl pkcs12 -export -out client.pfx -inkey client.key -in client2.pem http://publib.boulder.ibm.com/infocenter/tivihelp/v8r1/index.jsp?topic=%2Fcom.ibm.netcool_OMNIbus.doc%2Fprobes%2Fmicrosoft_scom%2Fmicrosoft_scom%2Fwip%2Freference%2Fmsscom_gnrt-clnt-crt.html http://publib.boulder.ibm.com/infocenter/tivihelp/v8r1/index...