Tuesday, 30 August 2016

Create ECDSA Certificate using OpenSSL

Create a Public and Private key PFX and Certificate file in simple steps.

Assuming that you have OpenSSL installed in a windows environment. Commonly its C:\Program Files (x86)\GnuWin32\bin>. For simplicity move the openssl.cnf to the local C:\ drive so it can be referenced from there.

Start a Command window as Administrator and navigate to the OpenSSL exe. (C:\Program Files (x86)\GnuWin32\bin>)

--Start the process, pick your curve you want (this one is prime256v1)
openssl ecparam -genkey -name prime256v1 -out privatekey.pem

--Next step is to create the Public certificate which will ask you a few questions.
openssl req -new -x509 -key privatekey.pem -out publickey.cer -days 365 -config c:\openssl.cnf

--Final step creates the Private pfx file
openssl pkcs12 -export -out public_privatekey.pfx -inkey privatekey.pem -in publickey.cer

You will end up with a few files which will be the Public certificate and Private PFX file.

No comments:

Post a Comment