Alternative to cryptoapicert "SUBJ:.xxxx" on linux

Scripts to manage certificates or generate config files
Post Reply
regger
OpenVpn Newbie
Posts: 14
Joined: Tue Sep 04, 2018 6:52 pm

Alternative to cryptoapicert "SUBJ:.xxxx" on linux

Post by regger » Wed Apr 01, 2020 12:36 pm

Dear all,

on my Windows machine I'm using cryptoapicert option to use a certificate in the Windows certification store. However, this doesn't work on linux, so I'm looking for an alternative. I think it should be possible to export the Windows certificate to some PKCS12 format. But I'm not sure how to achieve this. Did anybody of you get this to work? Maybe someone can point me to a howto or tutorial.

I already tried to export the certificate on the windows machine to some PEM format but I don't know how to proceed. I usedthe following command to convert the p7b to pem:

Code: Select all

openssl pkcs7 -in file.pem -print_certs -out certs.pem
Thank you very much for your help!

300000
OpenVPN Power User
Posts: 153
Joined: Tue May 01, 2012 9:30 pm

Re: Alternative to cryptoapicert "SUBJ:.xxxx" on linux

Post by 300000 » Fri Apr 03, 2020 9:05 pm

it is depend on how you import certificate to windows store , if you donot full understand what to import and how to import on windows store you can not export it and you cant use it outside windows machine at all. do you remember when you import p12 certificate to windows store it have option to enable export private key . that key very importance .did you choose that or not , windows default is not choose that option for you so you cant export because it will prevent stolen key for security purposes .

certificate thing make the name the same so people not understand at all , if you type mmc press enter and file add on end choose certificate . choose the certificate and export, when you can export to p12 i can help you to charge to linux , it must be p12 extension not other file type. if you can do that I can help you the rest

Post Reply