This topic discusses the commands involved in converting your SSL (Secure Sockets Layer) certificates to make them compatible with ASE's (API Security Enforcer) SSL certificate format. When PingIntelligence for APIs is deployed in sideband mode, ensure that the SSL certificates used by the gateway in .pem format. You can use OpenSSL for converting the certificates.

Converting a .crt extension to .pem extension -Complete the following steps to convert your SSL certificate from .crt extension to .pem extension.

  1. Run the following command to get ASE certificate details. 
    # openssl s_client -showcerts -connect <ASE-IP>:<SSL-PORT>
    For example
    openssl s_client -showcerts -connect 127.1.1.1:8443
  2. Create a temporary certificate file ase.crt using the contents of ASE certificate.
    Note: Make sure to include the content starting from "-----BEGIN CERTIFICATE-----" to "-----END CERTIFICATE-----" in the temporary ase.crt file.
  3. Run the following command to convert the ase.crt certificate into .pem file. 
    # openssl x509 -in ase.crt -out ase.pem