HellasGrid - How to import a Digital Certificate to the User Interface

From EGEE-see WIki

Till now, you have a Digital Certificate installed at your web browser. In order to use the HellasGrid infrastructure, for example to submit a job for execution, check the status of the job, get the output of the job, you have to install also your certificate to the User Interface you have an account. First you have to export your Digital Certificate from your web browser at which it is installed. On how to do this, please follow the instructions at http://www.grid.auth.gr/pki/hellasgrid-ca-2006/documents/certexport/InternetExplorer.php in case of Internet explorer, while follow the instructions at the site http://www.grid.auth.gr/pki/hellasgrid-ca-2006/documents/certexport/Mozilla.php in case of Mozilla. By following the instructions of the above links you have succesfully backed up your security certificate and private key at your machine. Now you have to copy your Digital Certificate from your machine to your home directory at the User Inteface you gained an account. Then you must create your Digital Certificate and private key in .pem format. In order to do this you must execute the following two openssl commands:

openssl pkcs12 -nocerts \
         -in mycertificate.pfx \
         -out ~user/.globus/userkey.pem

openssl pkcs12 -clcerts -nokeys \
        -in mycertificate.pfx \
        -out ~user/.globus/usercert.pem

The first openssl command gets as input your certificate in .pfx format (mycertificate.pfx) and creates your private key in .pem format (userkey.pem). The second openssl command gets as input your certificate in .pfx format (mycertificate.pfx) and creates your certificate in .pem format (usercert.pem). We must mention that the ~ user should be replaced by the path to your home area. Both your private key and certificate are stored in the .globus directory.

Finally you must give the appropiate read privileges at your private key and certificate.

chmod 444 usercert.pem 
chmod 400 userkey.pem