From 5661cd9cc5c7c0e22d1991c2dbef0d464854e291 Mon Sep 17 00:00:00 2001
From: Frank Sauerburger <frank@sauerburger.com>
Date: Thu, 4 Mar 2021 21:34:26 +0100
Subject: [PATCH] Add instructions to convert key+cert into p12
---
app/owlca/templates/owlca/certificate_pickup.html | 10 ++++++++++
.../templates/owlca/certificatesignrequest_create.html | 4 ++--
2 files changed, 12 insertions(+), 2 deletions(-)
diff --git a/app/owlca/templates/owlca/certificate_pickup.html b/app/owlca/templates/owlca/certificate_pickup.html
index 87bbf9e..9488d99 100644
--- a/app/owlca/templates/owlca/certificate_pickup.html
+++ b/app/owlca/templates/owlca/certificate_pickup.html
@@ -33,6 +33,16 @@
<strong>{{ certificatesigningrequest.verification_text }}</strong>
</p>
+<div class="alert alert-info">
+ <p>To use the certificate in your browser,</p>
+ <ol>
+ <li>combine your private key with the certificate
+ <pre>openssl pkcs12 -export -out cert.p12 -inkey key.pem -in cert.pem</pre>
+ </li>
+ <li>and import the <code>cert.p12</code> in your browser.</li>
+ </ol>
+</div>
+
{% if certificatesigningrequest.verification == 10 %}
<ul class="list-unstyled">
{% for cert in certificatesigningrequest.certificates.all %}
diff --git a/app/owlca/templates/owlca/certificatesignrequest_create.html b/app/owlca/templates/owlca/certificatesignrequest_create.html
index cd858a1..f90391a 100644
--- a/app/owlca/templates/owlca/certificatesignrequest_create.html
+++ b/app/owlca/templates/owlca/certificatesignrequest_create.html
@@ -32,9 +32,9 @@
<p>Generate a new private key and create a certificate signing request
(CSR). For example, execute the following command and enter the
prompted information.</p>
-
- <pre>openssl genrsa -aes256 -out key.pem 2048
+ <pre class="mb-3">openssl genrsa -aes256 -out key.pem 2048
openssl req -new -key key.pem -out csr.pem</pre>
+ <p>Keep the file <code>key.pem</code> safe and secure</p>
</div>
</div>
</div>
--
GitLab