Mastering Linux Security and Hardening - Second Edition

Hands-on lab – exporting and importing the Dogtag CA certificate

The Dogtag web portal doesn't have an option for this, so we'll have to use the command line:

1. In your home directory of the Dogtag server, create the password.txt file. On the first line of the file, insert the password for the server's certificate. (It's the password that you set when you ran the pkispawn command.)
2. Extract the server key and certificate like so:

sudo pki-server ca-cert-chain-export --pkcs12-file pki-server.p12 --pkcs12-password-file password.txt

Run an ls -l command to verify that the pki-server.p12 file was created.

3. The problem with the p12 file is that it contains both the server's private key and its certificate. But to add a certificate to the CA section ...