Skip to content

Latest commit

 

History

History
52 lines (32 loc) · 2.66 KB

GenerateMerchantCertAndKeyPem.md

File metadata and controls

52 lines (32 loc) · 2.66 KB
Raw

note: This part can be tricky. In case something is not working for you, you can generate the files using this guide

🗝️ Creating Certificate and Private Key as Separate PEM Files for Apple Merchant Certification 🗝️

Step 0: Obtain a Merchant Certificate from Apple Developer Portal 🍏

Before you can create the certificate and private key files, you must first obtain a merchant certificate from the Apple Developer Portal. You'll need to create a Certificate Signing Request (CSR) to do this. Follow the guide provided by Apple to create a CSR: Create a Certificate Signing Request (CSR).

Once you have the CSR, you can use it to create a merchant certificate in the Apple Developer Portal. Download the certificate in p12 format.

Step 1: Export the Certificate as a p12 File 📜

  1. 🖥️ Open the Keychain Access on your macOS machine.
  2. 🔍 Find the certificate you want to export.
  3. 🖱️ Right-click on the certificate and select "Export."
  4. 📂 Choose the p12 format for the export and save the file to your desired location.

Step 2: Convert the p12 File to PEM Format (Certificate and Private Key Together) 🔐

  1. 🖥️ Open your terminal and navigate to the directory where the p12 file is located.

  2. 🏃‍♂️ Run the following command to convert the p12 file to PEM format:

    $ openssl pkcs12 -in Certificates.p12 -out combined.pem -nodes

    Replace Certificates.p12 with the name of your p12 file.

Step 3: Extract the Certificate from the Combined PEM File 📄

  1. 🏃‍♂️ Run the following command to extract the certificate from the combined PEM file:

    $ openssl x509 -in combined.pem -out certificate.pem

Step 4: Extract the Private Key from the Combined PEM File 🔑

  1. 🏃‍♂️ Run the following command to extract the private key from the combined PEM file:

    $ openssl pkey -in combined.pem -out privatekey.pem

🎉 Congratulations! You now have the certificate in PEM format (certificate.pem) and the private key in PEM format (privatekey.pem) as separate files. Keep these files in a secure location, as they contain sensitive information.

📝 Note

  • 🔒 Always handle certificates and private keys with extreme care. Exposure of these files could compromise the security of your application.
  • 🛠️ If you encounter any issues, you may need to consult the OpenSSL documentation or seek help from a knowledgeable colleague or online community.

Happy coding, and stay secure! 🚀