Windows: HOWTO create a pkcs12 (.pfx or .p12) from OpenSSL files (.pem , .cer, .crt, …) in Windows?

a) Download openssl from the official website: Open http://www.openssl.org/. then download the “binary” program for Windows: > related > Binaries :http://www.openssl.org/related/binaries.html

b) OpenSSL requires a “openssl.cnf” configuration file. You can download a sample file from here and copy in your openssl folder.

c) Generate PKCS#12 with the following commands with a self-signed certificate.

• Generate an RSA private key

openssl genrsa -out OW_key.key 2048

• Generate a Certificate Signing Request

openssl req -new -key OW_key.key -out OW_request.csr -config C:\OpenSSL\openssl.cnf

• Generate a self signed public certificate

openssl x509 -req -days 3650 -in OW_request.csr -signkey OW_key.key -out OW_cert.crt

• Generate a PKCS#12 file

openssl pkcs12 -keypbe PBE-SHA1-3DES -certpbe PBE-SHA1-3DES -export -in OW_cert.crt -inkey OW_key.key -out OW_pkcs12.pfx -name “OraWorld”

d) Following artifacts will be generated once above commands are executed successfully.