LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-15-2007, 07:37 PM   #1
stardotstar
Member
 
Registered: Nov 2002
Location: /au/qld/bne/4157
Distribution: Gentoo mactel-linux
Posts: 238

Rep: Reputation: 30
How can I create an X509 .pfx certificate from an existing gpg key pair?


Hi guys,

I have an existing GPG key pair that I need to be able to support through Lutus Notes as an internet certificate for mail signing.

I have my public key linked in my sig but I need to be able to sign with my own key generated with gpg and Notes seems to only allow me to import the .pfx format - pkcs #12.

I have done some searching but am drawing a blank on how to take my existing gpg keys and make a .pfx file I can import into Lotes.

I believe that openSSL can do it:

Code:
Exporting PEM Files to PKCS12 Key Stores

Use the openssl pkcs12 tool to export a certificate/key pair to a pkcs12 store. Assume that you have a key (x.key) and a certificate (x.cert). The first step is to have both of them in a single file (x.pem). Then export the pair to a pkcs12 keystore (x.pfx).

%cat x.cert x.key > x.pem
%openssl pkcs12 -export -in x.pem -out x.pfx
but I'm not sure that I can provide openSSL with the necessary input key files since they are made with gpg.

Suffering the usual brain fade with wrangling these concepts.

Basically I can see I have a public key ring

Code:
.gnupg stardotstar$ gpg --list-sigs
/Users/stardotstar/.gnupg/pubring.gpg
and private
Code:
.gnupg stardotstar$ gpg -K
/Users/stardotstar/.gnupg/secring.gpg
but this is clearly not the format that openSSL needs and I am not sure what tool I would need to make the .pfx cert.

Any ideas guys?
TIA
Will
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
OpenSSL x509: Expecting: CERTIFICATE REQUEST chakkerz Linux - Networking 5 06-10-2010 12:28 PM
The revocation certificate in gpg Gins Linux - General 8 05-29-2007 09:33 AM
gpg can't create same key on different machine! rino.caldelli Linux - Software 7 04-20-2007 01:55 AM
put x509 certificate inside a file feedback Linux - Security 0 04-28-2006 05:08 AM
Help with x509 certificate and freeswan cmisip Linux - Security 3 08-19-2003 12:18 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:40 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration