What is the usage of .NET "makecert" utility to create self-signed certificate and key that is compatible with BW?.
Article ID: KB0092133
Updated On:
| Products | Versions |
|---|---|
| TIBCO ActiveMatrix BusinessWorks | - |
| Not Applicable | - |
Description
Resolution:
"C:\Program Files\Microsoft.NET\SDK\v2.0\Bin\makecert.exe" -r -n "CN=<common name>" -m 12 -eku 1.3.6.1.5.5.7.3.3 -sky exchange -a md5 -pe -ss my_msclient.cer
where the switches stand for
-r -> creates a self-signed certificate.
-n -> Specifies the subject's certificate name. This name must conform to the X.500 standard. The simplest method is to specify the name in double quotes, preceded by CN=; for example, "CN=myName".
-m -> Specifies the duration, in months, of the certificate validity period.
-eku -> Inserts a list of comma-separated, enhanced key usage object identifiers (OIDs) into the certificate.
-sky -> Specifies the subject's key type, which must be signature, exchange, or an integer that represents a provider type. By default, you can pass 1 for an exchange key and 2 for a signature key.
-a -> Specifies the signature algorithm. Must be either md5 (the default) or sha1.
-pe -> Marks the generated private key as exportable. This allows the private key to be included in the certificate.
-ss -> Specifies the subject's certificate store name that stores the output certificate
"C:\Program Files\Microsoft.NET\SDK\v2.0\Bin\makecert.exe" -r -n "CN=<common name>" -m 12 -eku 1.3.6.1.5.5.7.3.3 -sky exchange -a md5 -pe -ss my_msclient.cer
where the switches stand for
-r -> creates a self-signed certificate.
-n -> Specifies the subject's certificate name. This name must conform to the X.500 standard. The simplest method is to specify the name in double quotes, preceded by CN=; for example, "CN=myName".
-m -> Specifies the duration, in months, of the certificate validity period.
-eku -> Inserts a list of comma-separated, enhanced key usage object identifiers (OIDs) into the certificate.
-sky -> Specifies the subject's key type, which must be signature, exchange, or an integer that represents a provider type. By default, you can pass 1 for an exchange key and 2 for a signature key.
-a -> Specifies the signature algorithm. Must be either md5 (the default) or sha1.
-pe -> Marks the generated private key as exportable. This allows the private key to be included in the certificate.
-ss -> Specifies the subject's certificate store name that stores the output certificate
Issue/Introduction
What is the usage of .NET "makecert" utility to create self-signed certificate and key that is compatible with BW?.
Feedback
Yes
No
Powered by
