Convert a .cer file to .pfx file

ssl openssl pki
saurav picture saurav · Apr 25, 2016 · Viewed 29.8k times · Source

My ultimate objective is to sign my exe.

For this i would need a certificate. From my company's pKI i got a .cer file and .p7b (certificate chain) file.

Now to sign an exe i need a .pfx file. So i want to convert a .cer file to .pfx file

For this i donwloaded openssl distribution.

Now issuing this command openssl pkcs12 -export -in certificatename.cer -inkey privateKey.key -out certificatename.pfx -certfile cacert.cer is resulting into unable to load certificates.

Does anyone have any hints on this ?

best Regards, Saurav

Answer

saurav picture saurav · Apr 25, 2016

So the trick was to perform the following steps if you want to sign an exe after you got a .cer file

  1. Convert .cer to .pem using openssl command
  2. Convert .pem to .pfx using openssl command
  3. Use signtool to sign the .exe with the .pfx file generated in the step 2.

For openssl commands to convert check this

https://www.sslshopper.com/ssl-converter.html

For signtool commands check this

https://msdn.microsoft.com/en-us/library/windows/desktop/aa388170(v=vs.85).aspx

cheers,

Saurav

Related questions

What books will help me learn everything I can about SSL/PKI?

Since SSL is the backbone of the secure internet, (now technically called TLS), what are some good books I should read up on to understand all aspects of it? I suppose I'll need to learn some math, some PKI books, …

Read More
client certificates issued by my own CA with Apache

Trying to get an HTTPS session working using client certificates from a self-signed CA. The connection should check that all certificates are valid, both client and server side. The process I followed is roundly as follows: Create Certificate Authority openssl …

Read More
How to create a self-signed certificate with OpenSSL

I'm adding HTTPS support to an embedded Linux device. I have tried to generate a self-signed certificate with these steps: openssl req -new > cert.csr openssl rsa -in privkey.pem -out key.pem openssl x509 -in cert.csr -out …

Read More