Certificate: convert *.crt to *.cer; *.key to *.pvk

How do I convert .crt file into the Microsoft .cer format
Double-click on the yourwebsite.crt file to open it into the certificate display. 


Select the Details tab, then select the Copy to file button.



Press Next on the Certificate Wizard. 
Select Base-64 encoded X.509 (.CER), then Next.



Select Browse (to locate a destination) and type in the filename yourwebsite.
Select Next then Finished.

You now have the file yourwebsite.cer



Convert .key File to .pvk Private Key File

This blog post describes how to convert a .key file (encrypted PEM) format into a .pvk which can be used the Chilkat PrivateKey class (or CkPrivateKey).

The .key file is a text file, and if you open it in a text editor, you’ll see something like this:

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-CBC,AF79F04F0F24239B
	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-----END RSA PRIVATE KEY-----

(The .key file is the type of file generated by WS_FTP.)

There is a "pvktool" at http://www.drh-consultancy.demon.co.uk/pvk.html
that can be used to convert from a .key to .pvk.

Run pvk with these options to convert:

pvk -in Test.key -strong -topvk -out Test.pvk

The tool will prompt for both input and output passwords.

Now that you have a .pvk, it may be loaded into the Chilkat PrivateKey class:

ASP: PVK to XML
SQL Server: PVK to XML
C#: PVK to XML
C++: PVK to XML
Delphi: PVK to XML
Visual FoxPro: PVK to XML
Java: PVK to XML
Perl: PVK to XML
Python: PVK to XML
Ruby: PVK to XML
VB.NET: PVK to XML
Visual Basic: PVK to XML
VBScript: PVK to XML



Another way to convert *.key to *.pvk
Execute the command in the Terminal with Openssl:
    openssl rsa -in test.key -outform PVK -pvk-strong -out test.pvk


Additions: the different formats of certificates and the way to convert to each other.

PEM Format

The PEM format is the most common format that Certificate Authorities issue certificates in. PEM certificates usually have extentions such as .pem, .crt, .cer, and .key. They are Base64 encoded ASCII files and contain "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" statements. Server certificates, intermediate certificates, and private keys can all be put into the PEM format.

Apache and other similar servers use PEM format certificates. Several PEM certificates, and even the private key, can be included in one file, one below the other, but most platforms, such as Apache, expect the certificates and private key to be in separate files.

DER Format

The DER format is simply a binary form of a certificate instead of the ASCII PEM format. It sometimes has a file extension of .der but it often has a file extension of .cer so the only way to tell the difference between a DER .cer file and a PEM .cer file is to open it in a text editor and look for the BEGIN/END statements. All types of certificates and private keys can be encoded in DER format. DER is typically used with Java platforms. The SSL Converter can only convert certificates to DER format. If you need to convert a private key to DER, please use the OpenSSL commands on this page.

PKCS#7/P7B Format

The PKCS#7 or P7B format is usually stored in Base64 ASCII format and has a file extention of .p7b or .p7c. P7B certificates contain "-----BEGIN PKCS7-----" and "-----END PKCS7-----" statements. A P7B file only contains certificates and chain certificates, not the private key. Several platforms support P7B files including Microsoft Windows and Java Tomcat.

PKCS#12/PFX Format

The PKCS#12 or PFX format is a binary format for storing the server certificate, any intermediate certificates, and the private key in one encryptable file. PFX files usually have extensions such as .pfx and .p12. PFX files are typically used on Windows machines to import and export certificates and private keys.

When converting a PFX file to PEM format, OpenSSL will put all the certificates and the private key into a single file. You will need to open the file in a text editor and copy each certificate and private key (including the BEGIN/END statments) to its own individual text file and save them as certificate.cer, CACert.cer, and privateKey.key respectively.

OpenSSL Commands to Convert SSL Certificates on Your Machine

It is highly recommended that you convert to and from .pfx files on your own machine using OpenSSL so you can keep the private key there. Use the following OpenSSL commands to convert SSL certificate to different formats on your own machine:

OpenSSL Convert PEM

Convert PEM to DER

openssl x509 -outform der -in certificate.pem -out certificate.der

Convert PEM to P7B

openssl crl2pkcs7 -nocrl -certfile certificate.cer -out certificate.p7b -certfile CACert.cer

Convert PEM to PFX

openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt

OpenSSL Convert DER

Convert DER to PEM

openssl x509 -inform der -in certificate.cer -out certificate.pem

OpenSSL Convert P7B

Convert P7B to PEM

openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer

Convert P7B to PFX

openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer

openssl pkcs12 -export -in certificate.cer -inkey privateKey.key -out certificate.pfx -certfile CACert.cer

OpenSSL Convert PFX

Convert PFX to PEM

openssl pkcs12 -in certificate.pfx -out certificate.cer -nodes



Convert pfx to cer and pvk
Part 1:
  openssl pkcs12 -in cert.pfx -nocerts -nodes -out key.pem
  openssl rsa -in key.pem -outform PVK -pvk-strong -out key.pvk
Part 2:
  openssl pkcs12 -in cert.pfx -nokeys -nodes -out cert.pem
  openssl x509 -inform PEM -in cert.pem -outform DER -out cert.cer



  • 1
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值