Converting Grid Certificates to Other Formats

  • Take these Precautions before doing anything in ~/.globus
  • Do these openssl commands on lxplus and not on your laptop / different OS to avoid issues.

Converting to p12 from pem files

  • You will need to have these two files in ~/.globus
    • userkey.pem
    • usercert.pem
  • Delete any old ~/.globus/myCert.p12 file first. (Take Precautions !)
  • Do this to create the p12 file.
cd ~/.globus
openssl pkcs12 -export -inkey ./userkey.pem -in ./usercert.pem -out ./myCert.p12 -name "My Grid User Certificate"
chmod 400 ./myCert.p12

Converting to pem files from p12

  • You will need to have a p12 file ~/.globus/myCert.p12
  • Delete any old ~/.globus/userkey.pem and ~/.globus/usercert.pem files first. (Take Precautions !)
  • Do this to create the userkey.pem and usercert.pem files.
cd ~/.globus
openssl pkcs12 -nocerts -in ./myCert.p12 -out ./userkey.pem
openssl pkcs12 -clcerts -nokeys -in ./myCert.p12 -out ./usercert_noText.pem
openssl x509 -in ./usercert_noText.pem -text > ./usercert.pem
rm ./usercert_noText.pem
chmod 444 ./usercert.pem
chmod 400 ./userkey.pem
Edit | Attach | Watch | Print version | History: r4 < r3 < r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r4 - 2019-11-01 - AsokaDeSilva
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback