www.bonsaiframework.com
Page tree

Versions Compared

Old Version 7

changes.mady.by.user Tin Pham

Saved on

compared with

New Version 8

changes.mady.by.user Tin Pham

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

OpenSSL uses PKCS#12 (what is this a format?) as input and PEM as output - http://www.openssl.org/docs/apps/pkcs12.html#COMMAND_OPTIONS

More discussion on formats - http://www.bo.infn.it/alice/introgrd/certmgr/node2.html

Converting between formats - http://support.sas.com/documentation/cdl/en/secref/62092/HTML/default/viewer.htm#a002815156.htm

See what is in a cert - http://www.sslshopper.com/certificate-decoder.htmlThe file formats and naming convention of extensions is all over the place.

PEM Format

The most common format that CAs issue certificates in. The extension can be,

  • crt
  • cert
  • pem
  • key

The file is also Base64 encoded ASCII and contains "----BEGIN CERTIFICATE---" and "---END CERTIFICATE----". The following certificates can be stored as PEM,

  • Server Certificates (this the CA signed public key certificate)
  • Intermediate Certificates
  • Private Keys

The BonsaiFramework uses crt for the following certificates because the extension is recognized by Windows. Double-clicking on a crt file in Windows will show details about the certificate,

  • Server Certificates
  • Intermediate Certificates

By convention and because these keys do not work in Windows, Private Server Keys use the .key extension.

Converting from Open SSL to IKeyman

Note

This has not been verified. I ended up recreating my certificate as the version of IKeyman had a bug exporting certificates from the key database.

Import OpenSSL to IKeyman - http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.itame.doc/ss7cumst46.htm

...

Import OpenSSL to IKeyman (this doc looks complete) - http://i-proving.ca/space/Brett+Dubroy/blog/2008-08-07_1

References

Good description of formats - https://www.sslshopper.com/ssl-converter.html

OpenSSL uses PKCS#12 (what is this a format?) as input and PEM as output - http://www.openssl.org/docs/apps/pkcs12.html#COMMAND_OPTIONS

More discussion on formats - http://www.bo.infn.it/alice/introgrd/certmgr/node2.html

Converting between formats - http://support.sas.com/documentation/cdl/en/secref/62092/HTML/default/viewer.htm#a002815156.htm

See what is in a cert - http://www.sslshopper.com/certificate-decoder.html