.PFX certificate installation on Apache

- by admin

I have got a PFX made with Windows Certificate Services to be installed on Apache. So, using OpenSSL the file (source.pfx) has been converted to Apache compatible format:
openssl pkcs12 -in source.pfx -clcerts -nokeys -out dest.cer

openssl pkcs12 -in source.pfx -nocerts -nodes -out dest.key

The first command extracts public key to dest.cer, the second one extracts private key to dest.key.

The last but not the least is to update Apache configuration file:
<VirtualHost 192.168.0.1:443> 
...
SSLEngine on
SSLCertificateFile /path/to/dest.cer
SSLCertificateKeyFile /path/to/dest.key
...

and to restart Apache :-)