How to convert PFX certificate without importing password to PEM certificate on ADC

How to convert PFX certificate without importing password to PEM certificate on ADC

book

Article ID: CTX570581

calendar_today

Updated On:

Description

This article provides instruction on how to convert PFX certificate with importing password to PEM certificate in our document (using "Import PKCS#12" on GUI).
 Refer to Docs:  https://docs.netscaler.com/en-us/citrix-gateway/current-release/install-citrix-gateway/certificate-management-on-citrix-gateway/convert-pfx-certificate-to-pem.html

However, sometimes PFX certificate is created without importing password, for example, PFX certificate created from Azure App Service Certificate as below.

This kind of PFX certificate can't be convert to PEM and installed on ADC due to password requirement.

image.png
image.png
image.png


Instructions

1. Upload PFX certificate into ADC.
2. From CLI , type "shell" command to open shell mode.
3. Export key and certificate file separately from PFX certificate.

-To export the private key without a passphrase or password.
Type: openssl pkcs12 -in filename.pfx -nocerts -nodes -out key.pem
 
 
-To export the Certificate
Type: openssl pkcs12 -in filename.pfx -clcerts -nokeys -out cert.pem

4. I
nstall PEM format certificate and key files to Key pair from GUI, the password input will be skipped.

image.png

Environment

This software application is provided to you as is with no representations, warranties or conditions of any kind. You may use and distribute it at your own risk. CITRIX DISCLAIMS ALL WARRANTIES WHATSOEVER, EXPRESS, IMPLIED, WRITTEN, ORAL OR STATUTORY, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NONINFRINGEMENT. Without limiting the generality of the foregoing, you acknowledge and agree that: (a) the software application may exhibit errors, design flaws or other problems, possibly resulting in loss of data or damage to property; (b) it may not be possible to make the software application fully functional; and (c) Citrix may, without notice or liability to you, cease to make available the current version and/or any future versions of the software application. In no event should the software application be used to support ultra-hazardous activities, including but not limited to life support or blasting activities. NEITHER CITRIX NOR ITS AFFILIATES OR AGENTS WILL BE LIABLE, UNDER BREACH OF CONTRACT OR ANY OTHER THEORY OF LIABILITY, FOR ANY DAMAGES WHATSOEVER ARISING FROM USE OF THE SOFTWARE APPLICATION, INCLUDING WITHOUT LIMITATION DIRECT, SPECIAL, INCIDENTAL, PUNITIVE, CONSEQUENTIAL OR OTHER DAMAGES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. You agree to indemnify and defend Citrix against any and all claims arising from your use, modification or distribution of the software application.

Additional Information

eDoc:  https://docs.netscaler.com/en-us/citrix-gateway/current-release/install-citrix-gateway/certificate-management-on-citrix-gateway/convert-pfx-certificate-to-pem.html