{"id":631,"date":"2016-09-24T21:44:05","date_gmt":"2016-09-24T20:44:05","guid":{"rendered":"http:\/\/www.netexpertise.eu\/fr\/?p=631"},"modified":"2021-08-25T07:05:44","modified_gmt":"2021-08-25T06:05:44","slug":"reutiliser-certificat-exchange-serveur-web-apache","status":"publish","type":"post","link":"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html","title":{"rendered":"R\u00e9utiliser un Certificat Exchange \/ IIS PFX sur Apache"},"content":{"rendered":"\n

En g\u00e9n\u00e9rant un certificat Microsoft Exchange<\/a> (ou IIS), profitez-en pour y ajouter des noms de domaine suppl\u00e9mentaires et le r\u00e9utiliser sur un serveur web Apache<\/a>. Cela vous fera \u00e9conomiser du temps et de l’argent, \u00e0 moins que votre CA fournisse des certificats pour des plate-formes multiples.

<\/p>\n\n\n\n

\"Certificat<\/figure><\/div>\n\n\n\n


PFX est un format d’\u00e9change populaire pour les logiciels Microsoft comme Exchange ou IIS. Il s’agit d’un fichier d’archive PKCS#12<\/a> qui contient un certificat et la cl\u00e9 priv\u00e9e correspondante. Il peut aussi comporter d’autres choses comme le certificat CA.
Tout d’abord, copiez le fichier pfx g\u00e9n\u00e9r\u00e9 avec Exchange sur le serveur web Apache o\u00f9 vous devriez avoir tous les outils n\u00e9cessaires pour extraire et importer le certificat PFX sur Apache.<\/p>\n\n\n\n


Extraire la Cl\u00e9 et le Certificat du Fichier PFX<\/h2>\n\n\n\n

Extraire la cl\u00e9 priv\u00e9e du fichier PFX avec openssl. Entrez le mot de passe s’il vous est demand\u00e9.<\/p>\n\n\n\n

openssl pkcs12 -in cert.pfx -nocerts -out enc.key -nodes<\/code><\/pre>\n\n\n\n

Puis extraire le certificat<\/p>\n\n\n\n
openssl pkcs12 -in cert.pfx -nokeys -out cert.crt<\/code><\/pre>\n\n\n\n

En enfin, d\u00e9chiffrement de la cl\u00e9 priv\u00e9e RSA<\/p>\n\n\n\n
openssl rsa -in enc.key -out dec.key<\/code><\/pre>\n\n\n\n

Importer la Cl\u00e9 et le Certificat dans Apache<\/h2>\n\n\n\n
\u00a0
D\u00e9placez le certificat et la cl\u00e9 priv\u00e9e dans les r\u00e9pertoires appropri\u00e9s (Sur Linux Redhat), et donner les droits au propri\u00e9taire en lecture seule<\/p>\n\n\n\n
mv cert.crt \/etc\/pki\/tls\/certs\/\nmv dec.key \/etc\/pki\/tls\/private\/\nchmod 600 \/etc\/pki\/tls\/private\/dec.key<\/code><\/pre>\n\n\n\n
Sans le chmod, le red\u00e9marrage d’Apache retourne une erreur.
 
Si selinux est activ\u00e9, lancez<\/p>\n\n\n\n
restorecon -RvF \/etc\/pki<\/code><\/pre>\n\n\n\n
pour donner les bons droits aux nouveaux fichiers, ou vous obtiendrez le message d’erreur suivant:
[error] (13)Permission denied: Init: Can’t open server certificate file \/etc\/pki\/tls\/certs\/cert.crt<\/em>
\u00a0
D\u00e9clarez le nouveau certificat dans le fichier de configuration de l’h\u00f4te virtuel Apache:
SSLCertificateFile \/etc\/pki\/tls\/certs\/cert.crt
SSLCertificateKeyFile \/etc\/pki\/tls\/private\/dec.key
\u00a0
Et appliquez les modifications:<\/p>\n\n\n\n
\/etc\/init.d\/httpd reload<\/code><\/pre>\n\n\n\n
\u00a0
Vous avez maintenant le m\u00eame certificat sur Exchange (ou IIS au format PFX) et le serveur web Apache. Le certificat peut \u00eatre utilis\u00e9 sur d’autres serveurs web comme Nginx par exemple.<\/p>\n\n\n\n
V\u00e9rifiez avec votre autorit\u00e9 de certification en premier lieu. Certains fournissent des formats de certificats multiples pour des logiciels vari\u00e9s, ce qui peut vous \u00e9pargner ces manipulations.<\/p>\n","protected":false},"excerpt":{"rendered":"
En g\u00e9n\u00e9rant un certificat Microsoft Exchange (ou IIS), profitez-en pour y ajouter des noms de domaine suppl\u00e9mentaires et le r\u00e9utiliser sur un serveur web Apache. Cela vous fera \u00e9conomiser du temps et de l’argent, \u00e0 moins que votre CA fournisse des certificats pour des plate-formes multiples. PFX est un format d’\u00e9change populaire pour les logiciels […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false},"categories":[6,402,31],"tags":[406,430,389,328,33,30],"yoast_head":"\nNetexpertise - R\u00e9utiliser un Certificat Exchange \/ IIS PFX sur Apache<\/title>\n<meta name=\"description\" content=\"R\u00e9utilisez un certificat SSL pour Microsoft Exchange ou IIS sur votre serveur web Apache (ou Nginx) en quelques commandes\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Netexpertise - R\u00e9utiliser un Certificat Exchange \/ IIS PFX sur Apache\" \/>\n<meta property=\"og:description\" content=\"R\u00e9utilisez un certificat SSL pour Microsoft Exchange ou IIS sur votre serveur web Apache (ou Nginx) en quelques commandes\" \/>\n<meta property=\"og:url\" content=\"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html\" \/>\n<meta property=\"og:site_name\" content=\"Netexpertise\" \/>\n<meta property=\"article:published_time\" content=\"2016-09-24T20:44:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-08-25T06:05:44+00:00\" \/>\n<meta name=\"author\" content=\"dave\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@netexpertise\" \/>\n<meta name=\"twitter:site\" content=\"@netexpertise\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html\",\"url\":\"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html\",\"name\":\"Netexpertise - R\u00e9utiliser un Certificat Exchange \/ IIS PFX sur Apache\",\"isPartOf\":{\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/#website\"},\"datePublished\":\"2016-09-24T20:44:05+00:00\",\"dateModified\":\"2021-08-25T06:05:44+00:00\",\"author\":{\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632\"},\"description\":\"R\u00e9utilisez un certificat SSL pour Microsoft Exchange ou IIS sur votre serveur web Apache (ou Nginx) en quelques commandes\",\"breadcrumb\":{\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"http:\/\/www.netexpertise.eu\/fr\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"R\u00e9utiliser un Certificat Exchange \/ IIS PFX sur Apache\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/#website\",\"url\":\"http:\/\/www.netexpertise.eu\/fr\/\",\"name\":\"Netexpertise\",\"description\":\"Syst\u00e8mes \/ R\u00e9seaux \/ DevOps\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/www.netexpertise.eu\/fr\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632\",\"name\":\"dave\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/image\/\",\"url\":\"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g\",\"contentUrl\":\"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g\",\"caption\":\"dave\"},\"sameAs\":[\"http:\/\/www.netexpertise.eu\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Netexpertise - R\u00e9utiliser un Certificat Exchange \/ IIS PFX sur Apache","description":"R\u00e9utilisez un certificat SSL pour Microsoft Exchange ou IIS sur votre serveur web Apache (ou Nginx) en quelques commandes","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html","og_locale":"fr_FR","og_type":"article","og_title":"Netexpertise - R\u00e9utiliser un Certificat Exchange \/ IIS PFX sur Apache","og_description":"R\u00e9utilisez un certificat SSL pour Microsoft Exchange ou IIS sur votre serveur web Apache (ou Nginx) en quelques commandes","og_url":"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html","og_site_name":"Netexpertise","article_published_time":"2016-09-24T20:44:05+00:00","article_modified_time":"2021-08-25T06:05:44+00:00","author":"dave","twitter_card":"summary_large_image","twitter_creator":"@netexpertise","twitter_site":"@netexpertise","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html","url":"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html","name":"Netexpertise - R\u00e9utiliser un Certificat Exchange \/ IIS PFX sur Apache","isPartOf":{"@id":"http:\/\/www.netexpertise.eu\/fr\/#website"},"datePublished":"2016-09-24T20:44:05+00:00","dateModified":"2021-08-25T06:05:44+00:00","author":{"@id":"http:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632"},"description":"R\u00e9utilisez un certificat SSL pour Microsoft Exchange ou IIS sur votre serveur web Apache (ou Nginx) en quelques commandes","breadcrumb":{"@id":"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/www.netexpertise.eu\/fr\/mail\/exchange\/reutiliser-certificat-exchange-serveur-web-apache.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"http:\/\/www.netexpertise.eu\/fr"},{"@type":"ListItem","position":2,"name":"R\u00e9utiliser un Certificat Exchange \/ IIS PFX sur Apache"}]},{"@type":"WebSite","@id":"http:\/\/www.netexpertise.eu\/fr\/#website","url":"http:\/\/www.netexpertise.eu\/fr\/","name":"Netexpertise","description":"Syst\u00e8mes \/ R\u00e9seaux \/ DevOps","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/www.netexpertise.eu\/fr\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"http:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632","name":"dave","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"http:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/image\/","url":"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g","contentUrl":"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g","caption":"dave"},"sameAs":["http:\/\/www.netexpertise.eu"]}]}},"_links":{"self":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/posts\/631"}],"collection":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/comments?post=631"}],"version-history":[{"count":0,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/posts\/631\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/media?parent=631"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/categories?post=631"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/tags?post=631"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}