Citrix Netscaler Gateway and Public Wildcart Cert
If you have a publicly issued Wildcard certificate and want to use it for the Citrix Netscaler Gateway, typically you’ll have the certificate in a .PFX format.
You can’t import this and it needs to be converted via OpenSSL to a PEM cert file and a separate Private Key File. To do this, use the commands below. You can either upload the .PFX to the Netscaler and do this via Putty, or just use a local instance of OpenSSL.
Convert from PFX to PEM
Openssl.exe pkcs12 –in yourcert.pfx –clcerts –nokeys –out newcert.pem
Extract Private Key Only
Openssl pkcs12 –in yourcert.pfx –nocerts –out privatekeyfile.pem
You can then use the certificate wizard to import both the newcert.pem and privatekeyfile.pem for use with the Netscaler Gateway. Also, you’ll need to remember the password you used for the Private Key. Good Luck!
Would you like help with your Citrix environment? Let's Talk.
Equilibrium IT Solutions, Inc.