Merge lp:~jtv/gwacl/cert-notes into lp:gwacl

[Jeroen T. Vermeulen]

Documenting a way to get the .cer file that Azure wants.

[lp:~jtv/gwacl/cert-notes]

16. By Jeroen T. Vermeulen on 2013-03-18

No password on the certificate.

[Julian Edwards (julian-edwards)]

8 +It'll prompt you for a password.

Say "don't enter one, just press enter" here.

review: Approve

=== modified file 'README'
--- README	2013-03-14 07:39:05 +0000
+++ README	2013-03-18 02:07:22 +0000
@@ -15,6 +15,19 @@
 
    openssl pkcs12 -export -out azure.pfx -in azure.pem
 
+It'll prompt you for a password.  For our purposes, just leave it blank.
+
 Note the use of the ssleay.cnf - it just contains some crappy defaults so you
-don't get prompted for anything.  You can leave it out if you want, but you
-need to enter certificate data like country, organisation etc.
+don't get prompted for certificate data.  You can leave it out if you want, but
+then you'll need to enter country, organisation etc.
+
+Azure wants you to upload a .cer file.  There's probably a more direct way of
+doing this, but you can extract a .crt file from the .pfx:
+
+    openssl pkcs12 -in azure.pfx -out azure.crt -nokeys -clcerts
+
+...and then convert that .crt file to a .cer file:
+
+    openssl x509 -inform pem -in azure.crt -outform der -out azure.cer
+
+You can now upload azure.cer to Azure as a management certificate.