Macedonian Academic Research Grid Initiative

Exporting certificate from Mozilla Firefox/Netscape

Export Your Certificate from Mozilla

In order to use your certificate with any of the LCG applications you must export both your certificate and private key from your Mozilla browser and convert them to the neceassry format.

    1. Open your Mozilla browser and click on Tools and then on Options.

    2. Expand the Advanced & Security tab and select View certificates.

    3. Select your User Certificate and click the Backup button

    4. Mozilla will prompt you to choose a filename and location for the exported file containing both your certificate and private key

    5. Enter the Master password for the Software Security Device.

    6. You will have to enter a new password to export the file and encrypt it (PASS PHRASE).

    7. You have succesfully backed up your security certificate and private key.

Change your certificate format from P12 to PEM

Transfer the file you have just backed up to the UI(User Interface) your are using.You will need to change this to PEM format. If the edg-utils package is installed on your machine, simply executing /opt/edg/bin/pkcs12-extract will create appropriate certificate and key files and place them in the standard location.If this is not an option then you will have to do it mannually executing the following commands 

> openssl pkcs12 -nocerts \

         -in mycertificate.p12 \

	 -out ~user/.globus/userkey.pem



> openssl pkcs12 -clcerts -nokeys

        -in mycertificate.p12

	-out ~user/.globus/usercert.pem

The first command gives you your private key; this file must be readable only by you (e.g. unix permission 0600). The second command gives your public certificate (e.g. unix permission 0644). The ~ user should be replaced by the path to your home area. The .globus subdirectory is standard place to put your certificates.