Jump to content
Our Partners

stah

Members
 View Profile  See their activity

  • Content count

    4

  • Joined

  • Last visited

Posts posted by stah

  1. Posted

    Having spent hours trying to get my head around the impenetrable openssl software for public and private key generation I stumbled across a fairly straightforward way to do this - for "windows" users at least. Here is what you need to do:

     

    Go to:

    http://www.slproweb....n32OpenSSL.html

     

    download and install Win32 OpenSSL v0.9.8g Light

     

    this contains all you need to generate your private key and your public certificate. Install it in the openssl directory as prompted by the install procedure.

     

    using windows explorer go to openssl\bin and double click on the openssl.exe file - this will open a dos window and you are already in the correct directory to execute the dos commands. You can drag a shortcut to the desktop if you wish.

     

    From here type into the dos prompt:

    genrsa -out my-prvkey.pem 1024

    then "return"

    this will generate your private key file with the name my-prvkey.pem in that same directory.

     

    To generate the public certificate is a little more complicated because the software needs to be told where to find the openssl.cnf file which it needs to run. Type in at the dos prompt:

     

    req -config c:\openssl\bin\openssl.cnf -new -key my-prvkey.pem -x509 -days 365 -out my-pubcert.pem

    carriage return

     

    this will generate a one year cert - you will be prompted to fill in various details as you proceed.

     

    If you want a 10 year cert type in at the dos prompt:

    req -config c:\openssl\bin\openssl.cnf -new -key my-prvkey.pem -x509 -days 3650 -out my-pubcert.pem

    carriage return

     

    go to your paypal account

    under profile you will see "encrypted payment settings" and upload your public certificate for storage by paypal. You will need the number for thre paypal ipn module.

     

    good luck with the rest of it.

     

    Martin

    Thanks! but may be

     

    req -config c:\openssl\bin\openssl.cfg -new -key my-prvkey.pem -x509 -days 365 -out my-pubcert.pem

×