[RESOLVED] ASP.NET 2: How can I create a .pfx file from a .cer file?

[Zolomon]

Hello!

I have a .cer file provided by my client. I'm implementing a SAML v2.0 compliant solution using ComponentSpace's implementation of the specification. I need to create a .pfx file from the .cer file that I can store on an IIS server.

How can I do this? Not sure if this is the correct forum.

Any help at all is appreciated!

Regards,
Zolomon

[gep13]

Hey,

From the quick google that I have done (can't say I have done this before) the quickest easiest way would be to import it then export it, using the certificate manager in Windows Management Console.

Gary

[samlconsultant]

Most likely your .cer file only contains a public key. In order to generate a .pfx file, you will need a public\private key pair. The easiest way to do this is either use the MSFT makecert tool or use openssl. If you are going down the path of openssl, then the following commands should get you what you need. Good luck.

openssl req -new -x509 -days 365 -nodes -out yourdomain.org.crt -keyout yourdomain.org.pem
openssl pkcs12 -export -in yourdomain.org.crt -inkey yourdomain.org.pem -out yourdomain.org.pfx

rcarroll


< spam link removed by moderator >

[Zolomon]

Thanks!

I tried gep13's but I couldn't export the .cer as a .pfx file. I guess I'm lacking the private key.

[gep13]

Hey,

It could well be that, yes.

Are you in "charge" of the certificate? i.e. where the original is stored and created?

Gary

[Zolomon]

Nope! I've been given their .cer-file only and I read that it could consist of several private/public keys. It doesn't seem like it's containing any private keys, only a public key. Though, I am not sure how I can confirm this.

Do you know?

[gep13]

No, unfortunately I don't. The best bet would be to go back to the source, and ask them.

Gary