From: Mark Weaver (mark_at_npsl.co.uk)
Date: Fri Nov 29 2002 - 15:29:10 CET
FWIW the OpenSSL toolkit works beautifully on windows machines
(www.openssl.org), and can also generate PKCS #12. Binaries that work under
windows can be readily obtained from cygwin (www.cygwin.com and hit `install
now', or just compile from site source. The command you want is (also works
on linux with appropriate package installed):
openssl pkcs12 -in mycert.pem -inkey mykey.pem -export -out mypair.pfx
You should then be able to just import this in W2K by double clicking it.
Mark
> -----Original Message-----
> From: users-admin_at_lists.freeswan.org
> [mailto:users-admin_at_lists.freeswan.org]On Behalf Of Philip Blandford
> Sent: 29 November 2002 11:30
> To: users_at_lists.freeswan.org
> Subject: [Users] PKCS#12 certificates?
>
>
> I am trying to get FreeS/WAN working on a box without openssl
> installed with
> a W2K/AS peer - I'm generating all certificates for both ends on
> the windows
> box, and there appears to be no way to get a private key out of a
> pfx/pkcs12
> certificate in a format FreeS/WAN can understand, without using openssl to
> extract the private key in PEM format. Neither can I see a way of getting
> W2K to export the certificate with the private key in any other format.
>
> For various reasons just installing openssl isn't an option.
>
> Are there any windows tools to convert pkcs#12 to something else?
>
> _______________________________________________
> Users mailing list
> Users_at_lists.freeswan.org
> http://lists.freeswan.org/mailman/listinfo/users
>
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Sat Nov 30 2002 - 05:21:00 CET