Start by following the instructions at http://www.doegrids.org/pages/cert-request.html, part of which is included below.

After exporting the certificate from your browser, use these commands to get the public and private keys.

  • To get the encrypted public key :
    openssl pkcs12 -in YourCert.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem
    
  • To get the encrypted private key :
    openssl pkcs12 -in YourCert.p12 -nocerts -out $HOME/.globus/userkey.pem
    
  • Set correct permissions on the private key.
    chmod go-rw $HOME/.globus/userkey.pem
    
  • No labels