We highly recommend you use a company-owned SSL certificate to run all features of OfficeExpert properly!
The SSL certificate and key are stored in the folder /opt/panagenda/appdata/volumes/nginx. If you want to use your own certificate, put your certfile.pem and keyfile.key files in this folder.
→ Use winscp.exe to establish an ssh session and to copy it into the folder.
Note: both files must not be encrypted (no pass phrase required)!
Please note you have to keep the file names!
Afterwards, reboot the OfficeExpert virtual appliance after changing the SSL certificate.
What Can You Do if You Only Have a PFX File Available?
You can extract the required private key and public certificate from your PFX file.
Run the following commands on the OE command line level by using putty.exe to extract the private key and save it as a KEY file (after you have copied the pfx file over to the appliance/tmp folder):
openssl pkcs12 -in yourpfxfile.pfx -nocerts -out keyfile.key -nodes
You will be asked to enter the certificate password.
Afterwards, run the following command to also extract the public cert and save it to as a PEM file:
openssl pkcs12 -in yourpfxfile.pfx -clcerts -nokeys -out certfile.pem -nodes
Please open both files in an editor and make sure you remove the header text inside of the pem and key file.
Finally copy both files (pem and key) in the /opt/panagenda/appdata/volumes/nginx folder by using the following command:
cp certfile.pem /opt/panagenda/appdata/volumes/nginx/certfile.pem cp keyfile.key /opt/panagenda/appdata/volumes/nginx/keyfile.key
Verify That the Key and Certificate Match
openssl x509 -noout -modulus -in certificate.pem | md5sum
openssl rsa -noout -modulus -in keyfile.key | md5sum
The output of these two commands must be exactly the same. If you cannot locate a matching private key to your certificate, you will be required to re-key the certificate.