将证书.pem转换为.der / .cer [英] Convert certificate .pem to .der/.cer
问题描述
我尝试使用OpenSSL将.pem转换为.cer ...
I'm trying convert .pem to .cer using OpenSSL...
openssl x509 -inform PEM -in root.pem -outform DER -out root.cer
但是，我不知道如何安装
But, I don't know how to install the certificate on IIS 7.0 over Win Server 2008.
我阅读了一些关于它的教程，并尝试在IIS 7.0中安装证书
I read some tutorials about it and tried to install the cert in IIS 7.0
服务器证书 - >完成证书请求 - >
Server Certificates -> complete certificate request ->
>
The following error appears
找不到与此证书文件关联的证书请求。
Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created.
证书安装到IIS失败。
The installation of the certificate to IIS fails.
有关如何在IIS 7中安装.cer的任何建议？
Any suggestions on how to proceed installing the .cer in IIS 7?
推荐答案
证书请求是与证书不同的东西。这是获取证书的过程的一部分，简单地说，是：
A certificate request is a distinct thing from the certificate. It's part of the process of obtaining a certificate, which, put simply, is:
- 生成密钥对（私人和公共密钥） / li>
- 生成证书请求，基本上是包含在数字签名中的公钥以及您请求的证书信息（例如您的姓名）。
- 发送证书请求CA
- 执行特定于CA的审查过程
- CA使用证书请求中的信息生成证书并发送回请求者。
- Generate key pair (private & public key)
- Generate certificate request, which is basically the public key wrapped in a digital signature along with your requested certificate information (e.g. you name).
- Send certificate request to CA
- Do CA-specific vetting process
- CA generates certificate using information from certificate request and send back to requester.
通常，一旦您拥有证书，证书请求就可以被丢弃，因为它不再需要（除了审计目的之外）。
Normally once you have the certificate, the certificate request can be discarded since it's no longer needed (except maybe for audit purposes).
我不熟悉IIS，但我会假设你选择的选项（完整证书请求）试图在步骤1/2开始上述过程，但您已有证书（即步骤5）。您需要查找类似于导入证书的内容。
I am not familiar with IIS, but I would assume the option you are selecting ("complete certificate request") is trying to start the above process at steps 1/2, but you have a certificate already (i.e. step 5). You need to look for something akin to "Import Certificate".
这篇关于将证书.pem转换为.der / .cer的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
