Page History
This dialog box opens when you press the Security.. button on the Listener Information dialog. (To reach the Listener Information dialog, you select Listener from the main window's Advanced menu.) The server side of LANSA Communication Extensions will determine whether the communication line is to be a secure or a non-secure line.
Cryptographic Algorithm
...
OpenSSL will generate a new RSA private key, create a self-signed X.509 certificate using that key, and save both the key and certificate in the respective files (<keyFileName.pem> and <certificateFileName.pem>)
openssl pkcs12 -inkey <keyFileName.pem> -in <certificateFileName.pem> -export -out <certificate.p12>
- keyFileName.pem: Specifies the input file containing the private key.
- certificateFileName.pem: Specifies the input file containing the certificate.
- -export: This option tells OpenSSL to export the private key and certificate into a PKCS#12 file.
- certificate.p12: Specifies the name of the output PKCS#12 file.
How to use a custom certificate from both a self-signed and CA issued perspective
...
Different certificate formats:
| PEM (.pem) | This is a widely used format that stores the certificate and private key separately in plain text files. |
| DER (.der) | A binary format is used for certificates. |
| PKCS#7 (.p7b) | A format that can store multiple certificates, often used for certificate chains. |
| PKCS#12 (.pfx/.p12) | This format stores both the certificate and private key in a single file, typically password-protected. |
| Certificate (.crt) | A .crt file, short for "certificate," typically contains the public key and additional information about the entity (e.g., a server or an individual) to whom the certificate is issued. It may also include the digital signature of a trusted Certificate Authority (CA), which vouches for the authenticity of the public key and the entity's identity. |
| Private key (.key) | A .key file, short for "private key," contains the secret key associated with the public key in the corresponding .crt file. |
Create a .pfx/.p12 file from multiple certificate files and a private key file
...
- Click "Next" and then "Finish" to complete the export process.
- Confirmation:
- You should see a confirmation message indicating that the export was successful.