How to use .pem client side certificate with ZebraTester

ZebraTester only recognizes pkcs8 encoded key and certificate files. If your key and certificate are not on this encoding then you’ll have to convert them to pkcs8 format. This solution works for 5.2E and above versions.

Run the following command below from terminal or command prompt to get your key converted to pkcs8 format:
openssl pkcs8 -topk8 -inform PEM -outform PEM -nocrypt -in yourpkcs1.key -out pkcs8.key

You’d then need to generate a csr file by running the command below:
openssl req -new -key pkcs8.key -out pkcs8.csr

After generating a csr, you can then generate the certificate file:
openssl x509 -req -days 3650 -in pkcs8.csr -signkey pkcs8.key -out pkcs8.crt

Combine both key and certificate file by running the command below:
cat pkcs8.key pkcs.crt > pkcs8.pem
(or “type pkcs8.key pkcs8.crt > pkcs8.pem” on windows environment)

2 Likes

This is useful information.
Keep them coming, @ervin.