How to upload a PFX-format certificate to Kong

How to upload a pfx format certificate to kong?

1. Convert a PFX file to separate certificate and private key PEM files:

   openssl pkcs12 -in <pfx file> -nocerts -out key.pem -nodes
   openssl pkcs12 -in <pfx file> -nokeys -out cert.pem

   Copied!

2. Remove Bag Attributes, Key Attributes and any other attributes from key.pem and cert.pem.

   Make sure key.pem is in the format below:

   -----BEGIN PRIVATE KEY-----
   xxxxxxxxxxxxxxxxxxxx
   -----END PRIVATE KEY-----

   Copied!

   Make sure cert.pem is in the format below:

   -----BEGIN CERTIFICATE-----
   yyyyyyyyyyyyyyy
   -----END CERTIFICATE-----

   Copied!

   If you are using intermediate certificates, cert.pem should be in the format below instead:

   -----BEGIN CERTIFICATE-----
   <SERVER_CERTIFICATE>
   -----END CERTIFICATE-----
   -----BEGIN CERTIFICATE-----
   <INTERMEDIATE_CERTIFICATE>
   -----END CERTIFICATE-----
   ...

   Copied!

3. Upload key.pem and cert.pem to Kong via Kong Manager or the Admin API:

   1. Upload using Kong Manager:

      Access http://<kong>:8002/<workspace>/certificates/create, copy the content from cert.pem to the “Cert” input box, copy the content from key.pem to the “Key” input box, then click the “Create” button.

   2. Upload using the Admin API below:

      curl -X POST http://<kong>:8001/<workspace>/certificates \
      -F cert=@/path/to/cert.pem \
      -F key=@/path/to/key.pem

      Copied!

Check more details in the Certificate entity - set up a certificate documentation.