Two methods of SSL certificate format conversion

Because different server types support SSL Different certificate formats , So when you get CA Issued by SSL On certificate , It needs to be converted to the required certificate file format , common SSL Certificate format conversion method Share here .

Before transformation , You need to confirm which certificate format the server supports , Last one common SSL Form of certificate I mentioned .

SSL Certificate format conversion method

WebTrust The certification CA Certificates issued by institutions usually provide only PEM Format or PKCS#7 Format , For other certificate formats , You can select one of the following two common methods for format conversion .

Method 1 ： Use OpenSSL、Keytool conversion

1．pem transformation pfx

openssl pkcs12 -export -in 'test.pem' -inkey 'test.key' -out 'test.p12' -passout pass:123456

2．pem transformation jks

openssl pkcs12 -export -in 'test.pem' -inkey 'test.key' -out 'test.p12' -passout pass:123456

keytool -importkeystore -srckeystore 'test.p12' -srcstoretype PKCS12 -destkeystore 'test.jks' -srcstorepass 123456 -deststorepass 123456

3．pfx transformation pem

openssl pkcs12 -in test.p12 -passin pass:123456 -out test3.pem -nodes

4．pfx transformation jks

keytool -importkeystore -srckeystore 'test.p12' -srcstoretype PKCS12 -destkeystore 'test.jks' -srcstorepass 123456 -deststorepass 123456

5．jks transformation pem

keytool -importkeystore -srckeystore 'test.jks' -srcstoretype jks -destkeystore 'test.p12' -deststoretype PKCS12 -srcstorepass 123456  -deststorepass 123456

openssl pkcs12 -in test.p12 -passin pass:123456 -out test3.pem -nodes

6．jks conversion pfx

keytool -importkeystore -srckeystore 'test.jks' -srcstoretype jks -destkeystore 'test.p12' -deststoretype PKCS12 -srcstorepass 123456  -deststorepass 123456

Method 2 ：SSL Certificate format conversion tool

For non professionals , Method one seems a little complicated . Ruicheng SSL Certificate conversion tool You only need to upload relevant certificate files as required , After selecting the target format, the conversion can be completed , It's simpler . Here's the picture ：

When transformed into what is needed SSL After certificate format , You can begin to install SSL certificate .