Visual studio makecert DES3 certificate

0
votes

I'm tring to create certificate via Visual Studio Command Prompt to meet the following requirements :

• A valid, (not expired), X.509 signing certifi cate must be used (e-mail certifi cate).

• RSA public key (signature) algorithms using key lengths of 1024 bits (or larger). • Message Digest Algorithm must be SHA1-RSA.

• Encryption algorithm is DES3 (triple DES).

• Key usage must include digital signature (for signing fi les) and key encipherment (for encrypting the fi les).

• Certifi cate (Public Key Only) should be exported in the following format

» .p7c (* PKCS7 cryptographic message syntax standard certifi cate)

» .cer (DER encoded binary X.509 Certifi cate)

» .cer (Base64 encoded X.509 Certifi cate)

I have tried as :

makecert.exe -sv TestCert.pvk -n “Test Cert” -a sha1 -len 1024 -sky 2 -eku 1.6.6.9.2.8.0.3.9 TestCert.cer -r

pvk2pfx.exe -pvk TestCert.pvk -spc TestCert.cer -pfx TestCert.pfx -po Test123$

I also am reading from https://msdn.microsoft.com/en-us/library/bfsktky3(v=vs.100).aspx but so far I have no luck. I have done someting valid one while ago but don't seem to remember how. Can someone give me some tips or example will be great.

Thanks in advance.

1
visual-studiosslencryptionx509certificatedigital-certificate

1 Answers

1
votes
  1. The algorithm is named 3DES, not DES3.
  2. The encryption algorithm can be applied at the stage of writing the private key to the disk in some format (like PEM or PFX). It's not a part of the certificate. This is why you can't find any option to do this.