Visit Jeremy's Blog.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 11-15-2007, 06:37 PM   #1
Registered: Nov 2002
Location: /au/qld/bne/4157
Distribution: Gentoo mactel-linux
Posts: 238

Rep: Reputation: 30
How can I create an X509 .pfx certificate from an existing gpg key pair?

Hi guys,

I have an existing GPG key pair that I need to be able to support through Lutus Notes as an internet certificate for mail signing.

I have my public key linked in my sig but I need to be able to sign with my own key generated with gpg and Notes seems to only allow me to import the .pfx format - pkcs #12.

I have done some searching but am drawing a blank on how to take my existing gpg keys and make a .pfx file I can import into Lotes.

I believe that openSSL can do it:

Exporting PEM Files to PKCS12 Key Stores

Use the openssl pkcs12 tool to export a certificate/key pair to a pkcs12 store. Assume that you have a key (x.key) and a certificate (x.cert). The first step is to have both of them in a single file (x.pem). Then export the pair to a pkcs12 keystore (x.pfx).

%cat x.cert x.key > x.pem
%openssl pkcs12 -export -in x.pem -out x.pfx
but I'm not sure that I can provide openSSL with the necessary input key files since they are made with gpg.

Suffering the usual brain fade with wrangling these concepts.

Basically I can see I have a public key ring

.gnupg stardotstar$ gpg --list-sigs
and private
.gnupg stardotstar$ gpg -K
but this is clearly not the format that openSSL needs and I am not sure what tool I would need to make the .pfx cert.

Any ideas guys?


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
OpenSSL x509: Expecting: CERTIFICATE REQUEST chakkerz Linux - Networking 5 06-10-2010 11:28 AM
The revocation certificate in gpg Gins Linux - General 8 05-29-2007 08:33 AM
gpg can't create same key on different machine! rino.caldelli Linux - Software 7 04-20-2007 12:55 AM
put x509 certificate inside a file feedback Linux - Security 0 04-28-2006 04:08 AM
Help with x509 certificate and freeswan cmisip Linux - Security 3 08-18-2003 11:18 PM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:11 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration