SSL Installation

Full Chain PFX File Creation Guide

1. CSR (Certificate Signing Request) Oluşturma

First, you need to create a CSR file. You can use OpenSSL for this process. The following command creates the CSR and private key using a 2048-bit RSA key:

Linux Bash Code

openssl req -new -newkey rsa:2048 -nodes -keyout privatekey.key -out myrequest.csr

Windows CMD Code

1. OpenSSLInstall (For example, Win64 OpenSSL).

2. Open Command Prompt and run the following command:

Cmd Code

openssl req -new -newkey rsa:2048 -nodes -keyout privatekey.key -out myrequest.csr

After running the command, you will be asked to enter your certificate information as follows:

PlainText

Country Name (2 letter code) [OTHER
State or Province Name (full name) [Some-State]:Istanbul
Locality Name (eg, city) []:Istanbul
Organization Name (eg, company) [Internet Widgits Pty Ltd]:My Company
Organizational Unit Name (eg, section) []:IT Department
Common Name (e.g. server FQDN or YOUR name) []:www.example.com
Email Address []:[email protected]


Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Once these steps are completed, `privatekey.keyA private key file named ` and `myrequest.csrA CSR file named ` will be created.

2. Submitting the CSR File to the GlobalSign Certificate Authority (CA)

Send the CSR file you created to GlobalSign. GlobalSign will provide you with a certificate using your CSR file. After completing the GlobalSign checking processes, it will provide you with the necessary certificates.

3. Get Certificates

GlobalSign will provide you with the following files:

• Your own certificate (example.com.crt)

• Intermediate certificates (intermediate1.crt, intermediate2.crt)

• Root certificate (root.crt)

4. Merge Certificates

You need to combine all certificates into a single file. This can be done using the `cat` command:

Linux Bash Code

cat example.com.crt intermediate1.crt intermediate2.crt root.crt > fullchain.crt

This command returns all certificates to `fullchain.crt Combines into a file named `.

Windows

1. Open Notepad and follow these steps:

• example.com.crt copy and paste its contents.

• intermediate1.crt, intermediate2.crt ve root.crt copy and paste its contents sequentially.

• Combine all content fullchain.crt Save as .

2. Alternatively, WindowsPowerShell You can combine files using:

Powershell

Get-Content example.com.crt, intermediate1.crt, intermediate2.crt, root.crt | Set-Content fullchain.crt

5. Creating the PFX File

Using OpenSSL, create the PFX file using the private key and the merged certificate file:

Linux Bash Code

openssl pkcs12 -export -out fullchain.pfx -inkey privatekey.key -in fullchain.crt -certfile intermediate1.crt -certfile intermediate2.crt -certfile root.crt

Windows

Open Command Prompt and run the following command:

Cmd

openssl pkcs12 -export -out fullchain.pfx -inkey privatekey.key -in fullchain.crt -certfile intermediate1.crt -certfile intermediate2.crt -certfile root.crt

This command is `fullchain.pfx Creates a PFX file named `. You will be asked to enter a password when creating the PFX file. This password is used to secure the PFX file.

6. Verifying the PFX File

You can use the following command to verify that the PFX file you created was created correctly:

Linux Bash Code

openssl pkcs12 -info -in fullchain.pfx

Windows Cmd Code

Open Command Prompt and run the following command:

Cmd

openssl pkcs12 -info -in fullchain.pfx

This command displays the contents and information of the PFX file.