Other useful OpenSSL commands

You can use other OpenSSL commands to extract and combine the keys in generated PKCS12 certificates. You can also convert a password protected private key PEM file to a non-password protected file.

Commands to use with PKCS12 certificates

Description	OpenSSL command format
Create a certificate and key in one file	`openssl req -x509 -nodes -days 365 -newkey rsa:1024 -config` `path``\openssl.cnf -keyout` `path``\pkcs12Example.pem -out` `path``\pkcs12Example.pem`
Export the PKCS12 version of the certificate	`openssl pkcs12 -export -out` `path``\pkcs12Example.pfx -in` `path``\pkcs12Example.pem -name "``user_name_string``"`

Description	OpenSSL command format
Extracts the .pem key out of .pfx	`openssl pkcs12 -in pkcs12ExampleKey.pfx -out pkcs12ExampleKey.pem`
Removes password on key	`openssl rsa -in pkcs12ExampleKey.pem -out pkcs12ExampleKeyNoPW.pem` Note The ePO - On-prem server can then use the `pkcs12ExampleCert.pem` as the certificate and the `pkcs12ExampleKey.pem` as the key (or the key without a password `pkcs12ExampleKeyNoPW.pem`).

Description

OpenSSL command format

Extracts the .pem key out of .pfx

openssl pkcs12 -in pkcs12ExampleKey.pfx -out pkcs12ExampleKey.pem

Removes password on key

openssl rsa -in pkcs12ExampleKey.pem -out pkcs12ExampleKeyNoPW.pem

Note
The ePO - On-prem server can then use the pkcs12ExampleCert.pem as the certificate and the pkcs12ExampleKey.pem as the key (or the key without a password pkcs12ExampleKeyNoPW.pem).

Command to convert a password protected private key PEM file

To convert a password protected private key PEM file to a non-password protected file, type:

openssl rsa -in C:\ssl\keys\key.pem -out C:\ssl\keys\keyNoPassword.pem

Note
In the previous example, C:\ssl\keys is the input and output paths for the file names key.pem and keyNoPassword.pem.