[Fedora-directory-users] Importing private key into certificate store

[Rob Crittenden]

Or since you have 2 PEM files, you can use openssl to convert it into 
PKCS#12 file:

% openssl pkcs12 -export -in cert.pem -inkey key.pem -out cert.p12 -name 
\"Server-Cert\" -passout pass:foo

You can then import that into your database with something like:

% pk12util -i cert.p12 -d <server-root>/alias -P slapd-YOURHOST- -W foo

Replace <server-root> with the path to your DS install, probably 
/opt/fedora-ds. Check the alias directory to see what the value of 
YOURHOST should be. Note that the trailing dash is important.

rob

Rich Megginson wrote:
> You need to get your CA to export your key/cert data in pkcs12 (.p12) 
> format, then use the FDS pk12util to import both the key and cert.
> 
> Kevin M. Myer wrote:
> 
>> Hello,
>>
>> I would like to use an external application to handle my certificate 
>> request
>> (I'm using self-signed certificates - essentially my CA application would
>> generate the request and then sign it, instead of using any of the FDS
>> components to generate the request).  This process works fine, except 
>> that
>> there doesn't appear to be an easy way to get the private key for the
>> certificate into the certificate store.  Obviously, if you use the 
>> certificate
>> wizard or certutil to generate the request, the key ends up in the 
>> store.  But
>> if you don't, is there a way to import a key, so that importing a 
>> certificate
>> will work?  Currently it balks about importing a signed certificate 
>> because the
>> private key is missing.  I tried combining key and certificate into 
>> one file
>> (PEM format) but that didn't help.
>>
>> Kevin
>>
>>  
>>
> 
> ------------------------------------------------------------------------
> 
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20050913/f188949e/attachment.bin>