Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

SSL offloading with .p7b file possibility?

Hi,

I am trying to install SSL certificates in ACE for my exchange servers in a serverfarm. I have recieved cert file from AD admin in .p7b format. I have not recieved any key file. Please clarify whether ACE supports SSL offloading with .p7b format.

The below thread suggests that .p12 file format is supported in ACE. But what about .p7b?

https://supportforums.cisco.com/thread/2032875

Regards,

Madhan kumar G

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

SSL offloading with .p7b file possibility?

Hi Madhan,

The ACE doesn't natively support the PKCS7 format (.p7b), so, before importing the certificate, you will have to convert it into a different format.

The easiest way to do this is using OpenSSL (see www.openssl.org). The command to be used would be "

openssl pkcs7 -in .p7b -outform PEM -print_certs -out .txt". This will generate a text file including all the certificates in PEM format.

Also, please be aware that the PKCS7 format doesn't include the private key, so, you should have it in a separate file. This private key should be available in the device on which you generated the CRL.

I hope this helps

Daniel

1 REPLY
Cisco Employee

SSL offloading with .p7b file possibility?

Hi Madhan,

The ACE doesn't natively support the PKCS7 format (.p7b), so, before importing the certificate, you will have to convert it into a different format.

The easiest way to do this is using OpenSSL (see www.openssl.org). The command to be used would be "

openssl pkcs7 -in .p7b -outform PEM -print_certs -out .txt". This will generate a text file including all the certificates in PEM format.

Also, please be aware that the PKCS7 format doesn't include the private key, so, you should have it in a separate file. This private key should be available in the device on which you generated the CRL.

I hope this helps

Daniel

949
Views
0
Helpful
1
Replies
CreatePlease to create content