November 30, 2012 - 8:06pm - by admin

I have got a PFX made with Windows Certificate Services to be installed on Apache. So, using OpenSSL the file (source.pfx) has been converted to Apache compatible format:

openssl pkcs12 -in source.pfx -clcerts -nokeys -out dest.cer

openssl pkcs12 -in source.pfx -nocerts -nodes -out dest.key

The first command extracts public key to dest.cer, the second one extracts private key to dest.key.

The last but not the least is to update Apache configuration file:

<VirtualHost 192.168.0.1:443> 

  ...

  SSLEngine on

  SSLCertificateFile /path/to/dest.cer

  SSLCertificateKeyFile /path/to/dest.key

  ...

and to restart Apache :-)

---