Converting CRT and PEM files to RSA

scottalanmiller

Trying to load some certs into a Trend Micro IMSVA. IMSVA requires a very specific RSA format that we do not have. Trend's documentation is kinda useless as they don't give generic information, just one very specific example that is very different.

https://success.trendmicro.com/solution/1122406-unable-to-import-https-certificate-in-interscan-messaging-security-virtual-appliance-imsva-9-1

We've done this before using OpenSSL to convert LetsEncrypt files to IMSVA format no problem. But that's LetsEncrypt that we know. This one is, in theory, from GoDaddy. So probably not anything weird. Just not one that I know.

scottalanmiller

I would mention that the GoDaddy bundle includes one CRT, one PEM, one KEY, and one Intermediary P7B

JaredBusch

@scottalanmiller said in Converting CRT and PEM files to RSA:

I would mention that the GoDaddy bundle includes one CRT, one PEM, one KEY, and one Intermediary P7B

With those and openssl you can make whatever you need.

scottalanmiller

@JaredBusch said in Converting CRT and PEM files to RSA:

@scottalanmiller said in Converting CRT and PEM files to RSA:

I would mention that the GoDaddy bundle includes one CRT, one PEM, one KEY, and one Intermediary P7B

With those and openssl you can make whatever you need.

I would expect so. Any good guess on the syntax for this combination?

JaredBusch

@scottalanmiller said in Converting CRT and PEM files to RSA:

@JaredBusch said in Converting CRT and PEM files to RSA:

@scottalanmiller said in Converting CRT and PEM files to RSA:

I would mention that the GoDaddy bundle includes one CRT, one PEM, one KEY, and one Intermediary P7B

With those and openssl you can make whatever you need.

I would expect so. Any good guess on the syntax for this combination?

Not anymore. I haven't done this stuff since I switch to using LE almsot everywhere. The memories are gone.

scottalanmiller

@JaredBusch said in Converting CRT and PEM files to RSA:

@scottalanmiller said in Converting CRT and PEM files to RSA:

@JaredBusch said in Converting CRT and PEM files to RSA:

@scottalanmiller said in Converting CRT and PEM files to RSA:

I would mention that the GoDaddy bundle includes one CRT, one PEM, one KEY, and one Intermediary P7B

With those and openssl you can make whatever you need.

I would expect so. Any good guess on the syntax for this combination?

Not anymore. I haven't done this stuff since I switch to using LE almsot everywhere. The memories are gone.

Pretty hard to find any info on it online. Probably really simple, but you have to know the syntax.

scottalanmiller

Found this which didn't help, but could be a useful reference in the future...

OpenSSL Convert PEM
Convert PEM to DER

openssl x509 -outform der -in certificate.pem -out certificate.der

Convert PEM to P7B

openssl crl2pkcs7 -nocrl -certfile certificate.cer -out certificate.p7b -certfile CACert.cer

Convert PEM to PFX

openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt

OpenSSL Convert DER
Convert DER to PEM

openssl x509 -inform der -in certificate.cer -out certificate.pem

OpenSSL Convert P7B
Convert P7B to PEM

openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer

Convert P7B to PFX

openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer

openssl pkcs12 -export -in certificate.cer -inkey privateKey.key -out certificate.pfx -certfile CACert.cer

OpenSSL Convert PFX
Convert PFX to PEM

openssl pkcs12 -in certificate.pfx -out certificate.cer -nodes