Generating PKCS#12 file

In cryptography, PKCS #12 defines an archive file format for storing many cryptography objects as a single file. It is commonly used to bundle a private key with its X.509 certificate or to bundle all the members of a chain of trust.[1] A PKCS #12 file may be encrypted and signed. The internal storage containers, called "SafeBags", may also be encrypted and signed. A few SafeBags are predefined to store certificates, private keys and CRLs. Another SafeBag is provided to store any other data at individual implementer's choice. [2][3] PKCS #12 is one of the family of standards called Public-Key Cryptography Standards (PKCS) published by RSA Laboratories. The filename extension for PKCS #12 files is ".p12" or ".pfx".[4] These files can be created, parsed and read out with the OpenSSL pkcs12 command.

Refer the below to generate a PKCS#12 file containing the SSL server certificate and key, as well as the corresponding server certification CA trust chain file


$ openssl req -x509 -nodes -days 3650 -subj "/CN=idgovserver1.idc.oracle.com" -newkey rsa:2048 -keyout "idgovserver1.idc.oracle.com.key" -out "idgovserver1.idc.oracle.com.cer"
server1.idc.oracle.com.key" -out "idgovserver1.idc.oracle.com.cer"
Generating a 2048 bit RSA private key
..............+++
...............................+++
writing new private key to 'idgovserver1.idc.oracle.com.key'
-----

$ ls
idgovserver1.idc.oracle.com.cer idgovserver1.idc.oracle.com.key


$openssl pkcs12 -export -out "idgovserver1.idc.oracle.com.pfx" -inkey "idgovserver1.idc.oracle.com.key" -in "idgovserver1.idc.oracle.com.cer" -certfile "idgovserver1.idc.oracle.com.cer"

Enter Export Password:#####
Verifying - Enter Export Password:#####


$ ls
idgovserver1.idc.oracle.com.cer idgovserver1.idc.oracle.com.key idgovserver1.idc.oracle.com.pfx

Set machine Host Name : OEL 6.x

Check HostName
hostname

Check Fully quallified domain name
hostname --fqd

Set value for host name
vi /etc/sysconfig/network

NETWORKING=yes
HOSTNAME=machine1.example.com

Restart machine after changing value in /etc/sysconfig/network

Installing Open JDK

Install

yum install java-1.7.0-openjdk-devel


Set Environment

export JAVA_HOME=/usr/lib/jvm/java-1.7.0-openjdk.x86_64
export PATH=$JAVA_HOME/bin:$PATH


Yum Repo Configurations

vi /etc/yum.repos.d/oel6.repo
[dvd]
name=oel6
#baseurl=file:///media/OL6.3\ x86_64\ Disc\ 1\ 20120626/Server
baseurl=http://uln-internal.oracle.com/uln/OracleLinux/OL6/latest/x86_64
enabled=1
gpgcheck=0