0

I have three certificate files rootcertificate.txt, intermediateCertificate.txt, and serverCertificate.txt. I want to install an SSL certificate on the Nginx server in the ubuntu platform and for this required two files yourdomain.cert and yourdomain.key

So my question is how to convert three files into .cert and .key format

Hrishikesh
  • 299
  • 1
  • 14
  • Those three files need to be concatenated into a single file for the Nginx `ssl_certificate`. I do not see your private key unless it's embedded with the server certificate file. These are text files, so it is easy to check. See [this document](http://nginx.org/en/docs/http/configuring_https_servers.html). – Richard Smith Dec 09 '20 at 09:55
  • Thank you @RichardSmith for your response. – Hrishikesh Dec 09 '20 at 10:47

2 Answers2

0

You need to build a certificate bundle (certificate chain). To do so, you just have to concatenate your three certificates. Make sure to have the Root CA on top of your chain, instead it won't work.

cat rootcertificate.txt  intermediateCertificate.txt \
serverCertificate.txt  > fullchain.txt

If your certificate are in DER format and you want to convert them in PEM before building your chain. You can use the ssl command below to convert your certificate in PEM.

openssl x509 -in serverCertificate.txt -out serverCertificate.pem \ 
-inform DER -outform PEM

You can use the same conversion to convert your private key in PEM also. Make sure to change in the "inform" in your certificate format they are not DER. Default value is PEM format.

Youssou Ndiaye
  • 21
  • 1
  • 4
0

No you can't, as I understand all you have are certificates

  • rootcertificate.txt is root CA certificate
  • intermediateCertificate.txt is Intermediate CA certificate, created by root CA
  • serverCertificate.txt is your server certificate, created by Intermediate CA certificate

for yourdomain.cert, you just need to rename serverCertificate.txt into yourdomain.cert

for yourdomain.key, it's not possible, you need to request the person who give you certificates for the private key

phannam1412
  • 26
  • 1
  • 3