MicroStrategy ONE

Certificate Files: Common Extensions and Conversions

This section briefly explains common extensions for SSL certificate and keystore files, as well as how to convert these files between formatting types.

Common File Extensions

Certificate

Certificate files: .crt, .cer, .ca-bundle, .p7b, .p7c, .p7s, .pem

Keystore Files: .key, .keystore, .jks

Combined certificate and key files: .p12, .pfx, .pem

Converting Files

To set up SSL for your MicroStrategy environment, you will need to have your certificates and key files in .pem, .crt, and .key formats. If you have files from your IT administrator that do not have these extensions, they must be converted.

The following commands to convert between file types:

  • Convert a DER format file to PEM format

    Copy 
    openssl x509 -inform der -in certificate.cer -out certificate.pem
  • Convert a .pfx or .p12 containing a private key and certificates to PEM
    Copy 
    openssl pkcs12 -in certkey.pfx -out certkey.pem -nodes
    • Add -nocerts to only output the private key.
    • Add -nokeys to only output the certificates.
  • Convert .keystore or .jks to .key: Requires two commands to be run.

    1. Convert the file to the .p12 extension

      Copy
      keytool -importkeystore -srckeystore privatekey.keystore -destkeystore privatekey.p12 -srcstoretype jks -deststoretype pkcs12 -srcstorepass password -deststorepass password

    2. Convert to the .key extension

      Copy
      openssl pkcs12 -nocerts -nodes -in newkeystore.p12 -out keyfile.key