Convert IIS SSL Certificate to Apache (for win) certificate and key

[traydeezy]

Anyone know how to successfully convert a IIS SSL Certificate into a Private Key and Certificate to be used with Apache for Windows?

Here's the steps I've done so far without any success.

1. Extract SSL Certificate from IIS Server
2. Convert this certificate to a key.pem and cert.pem files using openssl on the windows apache server

a. openssl pkcs12 -in filename.pfx -nocerts -out key.pem
b. openssl pkcs12 -in filename.pfx -clcerts -nokeys -out cert.pem

When I try to used the key.pem and cert.pem files on my apache server I get an error that says:

[error] Init: SSLPassPhraseDialog builtin is not supported on Win32 (key file C:/Program Files/Apache Group/Apache2_ssl/ssl/key.pem)

What am I doing wrong? Can anyone help me get this right.

Any help would be greatly appreciated.

Thanks!!

 

[sleipnir214]

SSLPassPhraseDialog is used to configure how Apache asks for certificate private key decryption passphrases when Apache starts.

It sounds like your SSL implementation does not support that.

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!!

 

[sleipnir214]

Sorry. Submitted the post too soon.

I've never done a key conversion from IIS to Apache before, but I know that all IIS private keys are encrypted. Can you get the conversion apps to provided a non-encrypted private key?

Another method of getting the key converted is to ask the assistance of your certificate signing authority. Some will allow you, for a fee, to submit a key generated by Apache and replace the IIS-generated key with it. The signing authorities will usually ask a fee to do this.

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!!

 

[traydeezy]

Thanks for the input sleipnir214. I found out what I needed to do.

Here's the last step to make it work:

openssl rsa -in key.pem -out server.key

This removes the passphrase from the private key so Apache won't prompt you for your passphrase when it starts.