Convert Certificates

Convert the certificates into a format that can be used by Openswan. Convert the .p12 Check Point certificates to .pem certificates for use by Openswan. Use OpenSSL to convert the certificates.

You should have two directories with each with a dozen or more certificates.

Directory Name	File Name
\certs\location-a\	soho-user-a.dyndns.info.p12
	soho-user-b.dyndns.info.p12
	soho-user-c.dyndns.info.p12
	soho-user-d.dyndns.info.p12
	soho-user-e.dyndns.info.p12
\certs\location-b\	soho-user-a.dyndns.info.p12
	soho-user-b.dyndns.info.p12
	soho-user-c.dyndns.info.p12
	soho-user-d.dyndns.info.p12
	soho-user-e.dyndns.info.p12

1. Extract the key from the pkcs12 certificate file created with the Check Point ICA Management web site.
   1. openssl pkcs12 –in username.dyndns.info.p12 –nocerts –out username.dyndns.info.key
   2. Enter the certificate password when OpenSSL asks for the password. You will need to enter username123 three times.
   
   
2. Extract the personal certificate from the pkcs12 certificate file.
   1. openssl pkcs12 –in username.dyndns.info.p12 –clcerts –nokeys –out username.dyndns.info.pem
   2. Enter the certificate password when asked for a password.
   3. Use the vi editor to remove the CA certificate from the personal certificate you just created. Delete everything from line 1 “Bag Attributes” up to and including “----END CERTIFICATE----“.
      1. You can enter 23dd in vi to delete the first 23 lines. Make sure you do not delete too much.

You should now have .key private key and .pem public key files that can be used by Openswan on the SOHO VPN Routers.

Directory Name	File Name
\certs\location-a\	soho-user-a.dyndns.info.p12
	soho-user-a.dyndns.info.key
	soho-user-a.dyndns.info.pem
	soho-user-b.dyndns.info.p12
	soho-user-b.dyndns.info.key
	soho-user-b.dyndns.info.pem
	soho-user-c.dyndns.info.p12
	soho-user-c.dyndns.info.key
	soho-user-c.dyndns.info.pem
	soho-user-d.dyndns.info.p12
	soho-user-d.dyndns.info.key
	soho-user-d.dyndns.info.pem
	soho-user-e.dyndns.info.p12
	soho-user-e.dyndns.info.key
	soho-user-e.dyndns.info.pem
\certs\location-b\	soho-user-a.dyndns.info.p12
	soho-user-a.dyndns.info.key
	soho-user-a.dyndns.info.pem
	soho-user-b.dyndns.info.p12
	soho-user-b.dyndns.info.key
	soho-user-b.dyndns.info.pem
	soho-user-c.dyndns.info.p12
	soho-user-c.dyndns.info.key
	soho-user-c.dyndns.info.pem
	soho-user-d.dyndns.info.p12
	soho-user-d.dyndns.info.key
	soho-user-d.dyndns.info.pem
	soho-user-e.dyndns.info.p12
	soho-user-e.dyndns.info.key
	soho-user-e.dyndns.info.pem