How to use *.pfx certificate for Amazon ELB SSL

amazon-web-services openssl ssl-certificate amazon-elb pfx
snowindy picture snowindy · Mar 22, 2016 · Viewed 11.7k times · Source

I have cert.pfx file, I need to install to be used in Amazon Elastic Load Balancer. How can I do it?

Answer

snowindy picture snowindy · Mar 22, 2016
  1. Extract private key without password. First command will request pfx password and prompt for a password for key.pem; a password for key.pem must be provided. Second command asks for key.pem password provided for 1st command.

openssl pkcs12 -in cert.pfx -nocerts -out key.pem openssl rsa -in key.pem -out server.key

  1. Extract certificate:

openssl pkcs12 -in cert.pfx -clcerts -nokeys -out cert.pem

  1. Extract certificate chain:

openssl pkcs12 -in cert.pfx -nodes -nokeys -out chain.pem

  1. Certificate chain contains several items. You may need to remove item that refers to your certificate, it's on top and it's not needed. Give a try with/without removing top item. After that the other items should be placed in reverse order.

  2. server.key is private key in ELB, cert.pem is certificate in ELB, output #4 is certificate chain.

Good luck!

Related questions

Install Wildcard Certificate onto AWS EC2 Load Balancer

I'm having trouble. I followed a guide that I found here http://www.thenetworkadministrator.net/index.php/2011/12/iis-ssl-certificate-into-amazon-elastic-load-balancer/ And exported by cert and created all those files, but it doesn't tell you which file goes in which field. I tried …

Read More
ImportError: cannot import name md5

Don't really know what's going on here, I need to deploy my flask app on elastic beanstalk but somehow changed the path and can't run python application.py anymore [dotnet --info] .NET Core SDK (reflecting any global.json): Version: 2.1.701 Commit: 8…

Read More
Is AWS, specifically the load balancer service affected by SSL "Heart Bleed" exploit?

I can't find information on what versions they're using. I'd expect AWS to make a statement about this, because it's a pretty big deal, but again, can't find anything. To answer my own question, YES it is vulnerable. Use this …

Read More