Converting Grid Certificates to Other Formats

WARNING: This page is obsolete.

Please look at https://atlas-software.docs.cern.ch/analysis/analysis_tutorial/basicSetup/grid_cert/.

• Take these Precautions before doing anything in ~/.globus
• Do these openssl commands on lxplus and not on your laptop / different OS to avoid issues.

Converting to p12 from pem files

• You will need to have these two files in ~/.globus
  • userkey.pem
  • usercert.pem
• Delete any old ~/.globus/myCert.p12 file first. (Take Precautions !)
• Do this to create the p12 file.

cd ~/.globus
openssl pkcs12 -export -inkey ./userkey.pem -in ./usercert.pem -out ./myCert.p12 -name "My Grid User Certificate"
chmod 400 ./myCert.p12

Converting to pem files from p12

• You will need to have a p12 file ~/.globus/myCert.p12
• Delete any old ~/.globus/userkey.pem and ~/.globus/usercert.pem files first. (Take Precautions !)
• Do this to create the userkey.pem and usercert.pem files.

cd ~/.globus
openssl pkcs12 -nocerts -in ./myCert.p12 -out ./userkey.pem
openssl pkcs12 -clcerts -nokeys -in ./myCert.p12 -out ./usercert_noText.pem
openssl x509 -in ./usercert_noText.pem -text > ./usercert.pem
rm ./usercert_noText.pem
chmod 444 ./usercert.pem
chmod 400 ./userkey.pem