2 replies to this topic

[Hoheria]

Having spent hours trying to get my head around the impenetrable openssl software for public and private key generation I stumbled across a fairly straightforward way to do this - for "windows" users at least. Here is what you need to do:

Go to:
http://www.slproweb.com/products/Win32OpenSSL.html

download and install Win32 OpenSSL v0.9.8g Light

this contains all you need to generate your private key and your public certificate. Install it in the openssl directory as prompted by the install procedure.

using windows explorer go to openssl\bin and double click on the openssl.exe file - this will open a dos window and you are already in the correct directory to execute the dos commands. You can drag a shortcut to the desktop if you wish.

From here type into the dos prompt:
genrsa -out my-prvkey.pem 1024
then "return"
this will generate your private key file with the name my-prvkey.pem in that same directory.

To generate the public certificate is a little more complicated because the software needs to be told where to find the openssl.cnf file which it needs to run. Type in at the dos prompt:

req -config c:\openssl\bin\openssl.cnf -new -key my-prvkey.pem -x509 -days 365 -out my-pubcert.pem
carriage return

this will generate a one year cert - you will be prompted to fill in various details as you proceed.

If you want a 10 year cert type in at the dos prompt:
req -config c:\openssl\bin\openssl.cnf -new -key my-prvkey.pem -x509 -days 3650 -out my-pubcert.pem
carriage return

go to your paypal account
under profile you will see "encrypted payment settings" and upload your public certificate for storage by paypal. You will need the number for thre paypal ipn module.

good luck with the rest of it.

Martin

[stah]

Hoheria, on 20 December 2007, 08:56, said:

Having spent hours trying to get my head around the impenetrable openssl software for public and private key generation I stumbled across a fairly straightforward way to do this - for "windows" users at least. Here is what you need to do:

Go to:
http://www.slproweb....n32OpenSSL.html

download and install Win32 OpenSSL v0.9.8g Light

this contains all you need to generate your private key and your public certificate. Install it in the openssl directory as prompted by the install procedure.

using windows explorer go to openssl\bin and double click on the openssl.exe file - this will open a dos window and you are already in the correct directory to execute the dos commands. You can drag a shortcut to the desktop if you wish.

From here type into the dos prompt:
genrsa -out my-prvkey.pem 1024
then "return"
this will generate your private key file with the name my-prvkey.pem in that same directory.

To generate the public certificate is a little more complicated because the software needs to be told where to find the openssl.cnf file which it needs to run. Type in at the dos prompt:

req -config c:\openssl\bin\openssl.cnf -new -key my-prvkey.pem -x509 -days 365 -out my-pubcert.pem
carriage return

this will generate a one year cert - you will be prompted to fill in various details as you proceed.

If you want a 10 year cert type in at the dos prompt:
req -config c:\openssl\bin\openssl.cnf -new -key my-prvkey.pem -x509 -days 3650 -out my-pubcert.pem
carriage return

go to your paypal account
under profile you will see "encrypted payment settings" and upload your public certificate for storage by paypal. You will need the number for thre paypal ipn module.

good luck with the rest of it.

Martin

Thanks! but may be

req -config c:\openssl\bin\openssl.cfg -new -key my-prvkey.pem -x509 -days 365 -out my-pubcert.pem

[mlavanish]

Thanks! This helped me a ton. The fix for the cfg. file in the second post was good as well.