Start by following the instructions at http://www.doegrids.org/pages/cert-request.html, part of which is included below.
After exporting the certificate from your browser, use these commands to get the public and private keys.
- To get the encrypted public key :
openssl pkcs12 -in YourCert.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem
- To get the encrypted private key :
openssl pkcs12 -in YourCert.p12 -nocerts -out $HOME/.globus/userkey.pem
- Set correct permissions on the private key.
chmod go-rw $HOME/.globus/userkey.pem