LinuxQuestions.org
Have you listened to LQ Radio?
Go Back   LinuxQuestions.org > Forums > Linux > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Thread Tools Search this Thread
Old 11-15-2007, 07:37 PM   #1
stardotstar
Member
 
Registered: Nov 2002
Location: /au/qld/bne/4157
Distribution: Gentoo mactel-linux
Posts: 221
Thanked: 0
How can I create an X509 .pfx certificate from an existing gpg key pair?


[Log in to get rid of this advertisement]
Hi guys,

I have an existing GPG key pair that I need to be able to support through Lutus Notes as an internet certificate for mail signing.

I have my public key linked in my sig but I need to be able to sign with my own key generated with gpg and Notes seems to only allow me to import the .pfx format - pkcs #12.

I have done some searching but am drawing a blank on how to take my existing gpg keys and make a .pfx file I can import into Lotes.

I believe that openSSL can do it:

Code:
Exporting PEM Files to PKCS12 Key Stores

Use the openssl pkcs12 tool to export a certificate/key pair to a pkcs12 store. Assume that you have a key (x.key) and a certificate (x.cert). The first step is to have both of them in a single file (x.pem). Then export the pair to a pkcs12 keystore (x.pfx).

%cat x.cert x.key > x.pem
%openssl pkcs12 -export -in x.pem -out x.pfx
but I'm not sure that I can provide openSSL with the necessary input key files since they are made with gpg.

Suffering the usual brain fade with wrangling these concepts.

Basically I can see I have a public key ring

Code:
.gnupg stardotstar$ gpg --list-sigs
/Users/stardotstar/.gnupg/pubring.gpg
and private
Code:
.gnupg stardotstar$ gpg -K
/Users/stardotstar/.gnupg/secring.gpg
but this is clearly not the format that openSSL needs and I am not sure what tool I would need to make the .pfx cert.

Any ideas guys?
TIA
Will
stardotstar is offline     Reply With Quote

Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
The revocation certificate in gpg Gins Linux - General 8 05-29-2007 09:33 AM
gpg can't create same key on different machine! rino.caldelli Linux - Software 7 04-20-2007 01:55 AM
put x509 certificate inside a file feedback Linux - Security 0 04-28-2006 05:08 AM
OpenSSL x509: Expecting: CERTIFICATE REQUEST chakkerz Linux - Networking 4 02-23-2005 04:55 AM
Help with x509 certificate and freeswan cmisip Linux - Security 3 08-19-2003 12:18 AM


All times are GMT -5. The time now is 04:23 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Advertisement
Oracle Magazine contains technology strategy articles, sample code, tips, Oracle and partner news, how to articles for developers and DBAs, and more. Click Here to receive a complimentary subscription courtesy of LQ.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
RSS2  LQ Podcast
RSS2  LQ Radio
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions
Open Source Consulting | Domain Registration