openssl create certificate netscaler / fortigate from pfx IIS
- No Comments
- Jul, 17, 2014
- Angelo Schalley
- Certificates, Fortigate/Fortinet, Netscaler, Networking, security
use a linux distro off your choice or download the unix tools to a microsoft machine
openssl pkcs12 -in site.domain.com.pfx -nocerts -out site.domain.com.key.pem
openssl pkcs12 -in site.domain.com.pfx -clcerts -out site.domain.com.pem
openssl rsa -in site.domain.com.key.pem -out site.domain.com.server.key
Read more on openssl create certificate netscaler / fortigate from pfx IIS…
repair / restore private key on a microsoft server with certutil
- 2 Comments
- Nov, 08, 2012
- Angelo Schalley
- Certificates, ISA/TMG, security, Windows-Microsoft
Instructions
Log into the server with an administrative account. Choose Start and choose Run…
In the box type in mmc and click ok.
In the MMC go to File –> Add / Remove Snap-in…
Click the Add button and choose certificates and click Add.
Read more on repair / restore private key on a microsoft server with certutil…
LDAPS windows 2008 R2 – external domain – CA
- No Comments
- Jul, 21, 2011
- Angelo Schalley
- Active Directory, Certificates, IIS, Networking, security, Windows-Microsoft
on the local domain controller create a request :
;—————– request.inf —————–
[Version]
Signature=”$Windows NT$[NewRequest]
Subject = “CN=<dc01.domain.local>” ; replace with the FQDN of the DC
KeySpec = 1
KeyLength = 1024
; Can be 1024, 2048, 4096, 8192, or 16384.
; Larger key sizes are more secure, but have
; a greater impact on performance.
Exportable = TRUE
MachineKeySet = TRUE
SMIME = False
PrivateKeyArchive = FALSE
UserProtected = FALSE
UseExistingKeySet = FALSE
ProviderName = “Microsoft RSA SChannel Cryptographic Provider”
ProviderType = 12
RequestType = PKCS10
KeyUsage = 0xa0
[EnhancedKeyUsageExtension]
OID=1.3.6.1.5.5.7.3.1 ; this is for Server Authentication
Read more on LDAPS windows 2008 R2 – external domain – CA…