Re: [Ejbca-develop] Credential Separation

[Tomas G. <to...@pr...>]

Hi,



With P12 the private key is generated by the CA. If you have a P12 it is rather simple to create PEM out of it. EJBCA does have a Java sample class for this even.

There is no out-of-the-box function to get both P12 and PEM though, but that could be created in different ways. A small program on the client side as you say, or a plug-in web page in EJBCA that delivers it directly, as a zip or similar.



Regards,

Tomas



-----Original message-----
From: Michael Postmann <M.P...@pa...>
Sent: Tuesday 3rd November 2015 12:28
To: ejb...@li...
Subject: [Ejbca-develop] Credential Separation

Hi!

 
We want to use EJBCA to issue SSL client certificates to our business partners which they could use to authenticate against our systems.

We’re currently using a very ugly, self-written, undocumented bash-script based solution which needs to be replaced.

 
Our new approach is using EJBCA. Via the admin-interface, our techsupport creates a new end entity. The password is auto generated by EJBCA and information on how to retrieve the certificate is sent to the business partner

Our business partners do not necessarily have a lot of technical knowledge and some need the certificate in both P12 and PEM format (most of them will probably use Windows) but in EJBCA I have to choose which one I’d like to have.

 
Is it possible to have EJBCA export the certificate in both P12 and PEM format? Or is there a simple (like drag’n’drop) solution for Windows where I can tell the business partner to install a software or put an executable on his desktop and just drag’n’drop the P12 file on it?

 
Regards

nomike

 
 
Ing. Michael Postmann

Application Engineer

 
paysafecard.com <http://paysafecard.com/> Wertkarten GmbH
 Am Euro Platz 2, A-1120 Wien
 
 phone:  +43 1 / 720 83 80 – 649
 fax:      +43 1 / 720 83 80 – 12

mobile: +43 676 / 765 77 31

skype:   nomike31
 mail:     m.p...@pa... <mailto:m.p...@pa...> 

web:     www.paysafecard.com <http://www.paysafecard.com/> 
 
 Firmenbuch: FN 194434h
 Handelsgericht Wien

 

------------------------------------------------------------------------------




_______________________________________________

Ejbca-develop mailing list

Ejb...@li...

https://lists.sourceforge.net/lists/listinfo/ejbca-develop