I tried re ordering the commands and tried renaming it to pfx and it doesn't make any difference.
openssl pkcs12 -in proxy.p12 -info -clcerts This seems to work fine. It asked me for the password, shows me the Certificate, then asked me for the pem pass phrase, and shows me the Private Key. So i'm transferring it with FTP, could that be the problem? Any other way to transfer it to a windows machine? Dan. On Thu, Feb 4, 2010 at 11:24 AM, Patrick Patterson <ppatter...@carillonis.com> wrote: > On February 4, 2010 11:38:36 am Dan Letkeman wrote: >> Ok, when I try to import it into Internet Explorer and I get this >> error: "The file type is not recognizable. Select another file" >> > That's really strange - although it SHOULDN'T make an iota of difference, > rename your .p12 to .pfx, and see what happens. > >> So i'm guessing I did something wrong. The CA certificate for the >> company we bought the certificate from is already in the Astaro and in >> Internet Explorer's CA list. >> >> I just combined the certificate and our key on a linux box that has >> openssl. >> >> openssl -pkcs12 -in proxy.pem -inkey proxy.key -export -out proxy.p12 >> > Well, aside from the extra - in front of the pkcs12, this looks right. > > Just for fun try re-ordering the commands - again, it SHOULDN'T make a > difference, but you never know :) > > openssl pkcs12 -export -in proxy.pem -inkey proxy.key -out proxy.p12 > > How are you transfering the file around? perhaps your getting some form of > corruption during your file transfer? > > What happens if you immediately try and re-parse the PKCS12 file on the same > Linux box? > > openssl pkcs12 -in proxy.p12 -info -clcerts > > Have fun. > > Patrick. > >> >> On Thu, Feb 4, 2010 at 9:08 AM, Patrick Patterson >> >> <ppatter...@carillonis.com> wrote: >> > On February 3, 2010 05:57:36 pm Dan Letkeman wrote: >> >> The server i'm trying to import it into is and Astaro Firewall. >> >> www.astaro.com. I have also just tried to import it into Internet >> >> Explorer on Windows XP and I get an error. >> > >> > Again - what error do you get - just saying that you get an error doesn't >> > really help us to help you. >> > >> >> The Astaro only takes PKCS12 files. >> > >> > Ok - do you need to configure any sort of CA certificate? What values >> > does the Astaro require in the certificate? >> > >> > -- >> > Patrick Patterson >> > President and Chief PKI Architect, >> > Carillon Information Security Inc. >> > http://www.carillon.ca >> > ______________________________________________________________________ >> > OpenSSL Project http://www.openssl.org >> > User Support Mailing List openssl-us...@openssl.org >> > Automated List Manager majord...@openssl.org >> >> ______________________________________________________________________ >> OpenSSL Project http://www.openssl.org >> User Support Mailing List openssl-us...@openssl.org >> Automated List Manager majord...@openssl.org > > -- > Patrick Patterson > President and Chief PKI Architect, > Carillon Information Security Inc. > http://www.carillon.ca > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-us...@openssl.org > Automated List Manager majord...@openssl.org > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
