You can save yourself the hassle of copy-pasting all that code and store the private key next to the certificate in a pfx/pkcs#12 file: openssl pkcs12 -export -in my.cer -inkey my.key -out mycert.pfx You’ll have to supply a password, which you have to pass to the constructor of X509Certificate2: X509Certificate2 cert = new X509Certificate2(“mycert.pfx”,”password”);
Just to clarify, an X.509 certificate does not contain the private key. The word certificate is sometimes misused to represent the combination of the certificate and the private key, but they are two distinct entities. The whole point of using certificates is to send them more or less openly, without sending the private key, which … Read more
this one did it for me docker-machine regenerate-certs –client-certs
I had the same problem as sunnycomes and his comment was correct. I was lacking a ‘-‘ at the very end of the last line of the file. Before I had: —–END CERTIFICATE—- and changing it to: —–END CERTIFICATE—– fixed it. I’ve learnt that I have to be careful when copying certificates text from a … Read more
I think you need re-generate the apiserver certificate /etc/kubernetes/pki/apiserver.crt you can view current expire date like this. openssl x509 -in /etc/kubernetes/pki/apiserver.crt -noout -text |grep ‘ Not ‘ Not Before: Dec 20 14:32:00 2017 GMT Not After : Dec 20 14:32:00 2018 GMT Here is the steps I used to regenerate the certificates on v1.11.5 cluster. … Read more
A little clarification about your mentioned file types: .cer-files are X.509 Certificates .pfx-files are encrypted X.509 Certificates using a password-based symmetric key, also see PKCS #12 (Wikipedia) .snk-files only contain the RSA key (public/private or public only) It doesn’t matter if you sign an assembly using .pfx-files or .snk-files, it will get strong named either … Read more
If you are using windows server 2008 or windows 7, then you need the permission to read private key. use FindPrivateKey tool to find path. For example: FindPrivateKey My LocalMachine -n “CN=MyCert” –a it returns the path: C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys[File Name] Go to that path and open file properties Go to security tab Click on “Edit” then … Read more
Add this line of code to the second line and see how it works: store.Open(OpenFlags.ReadOnly); and then this at the bottom :): store.Close();
X509Store store = new X509Store(StoreName.My, StoreLocation.LocalMachine); store.Open(OpenFlags.ReadOnly); foreach (X509Certificate2 certificate in store.Certificates){ //TODO’s }
Yes, but not with publicly documented classes. I’ve documented the process in this article. import sun.security.x509.*; import java.security.cert.*; import java.security.*; import java.math.BigInteger; import java.util.Date; import java.io.IOException /** * Create a self-signed X.509 Certificate * @param dn the X.509 Distinguished Name, eg “CN=Test, L=London, C=GB” * @param pair the KeyPair * @param days how many days … Read more