Apart from openssl, can anyone share open source method to convert .pem to .pfx certificate files

Hello Sydney Forvan,

The challenges you're facing with converting your .pem certificates to .pfx format for Azure Single Sign-On (SSO) integration. I understand that your current certificates are in .pem, .raw, .base64, and federated formats, and you're encountering issues related to the private key during the conversion process.

PEM Format: Typically contains only the public certificate.

PFX Format: A PKCS#12 archive that includes both the public certificate and its corresponding private key, often protected with a password.

For Azure SSO integration, Azure requires a .pfx file that contains both the certificate and its private key. If the private key is missing or not correctly associated, the conversion will fail.

Using OpenSSL (Command-Line Tool):

If you have both the certificate (certificate.pem) and the private key (privatekey.pem), you can use OpenSSL to combine them into a .pfx file:

openssl pkcs12 -export -in certificate.pem -inkey privatekey.pem -out certificate.pfx

You'll be prompted to set a password for the .pfx file during this process.
Reference: Microsoft Q&A - Convert PEM to PFX_

Using Windows Certificate Manager (GUI-Based):

If you're operating on a Windows system:

-Import the Certificate:

Double-click the .pem file to open the Certificate Import Wizard.

Choose to place the certificate in the "Personal" store.

-Export as PFX:

Open the Certificate Manager (certmgr.msc).

Navigate to "Personal" > "Certificates".

Locate your imported certificate, right-click, and select "Export".

Choose to export the private key and follow the prompts to save as a .pfx file, setting a password when prompted.
Reference: Microsoft Q&A - Export PFX with Password

Using Azure Key Vault:

Azure Key Vault supports importing certificates in both .pem and .pfx formats. However, when importing a .pem file, it must include both the certificate and the private key.

-Prepare the PEM File: Ensure your .pem file has the following structure: -----BEGIN CERTIFICATE----- [Base64 Encoded Certificate] -----END CERTIFICATE----- -----BEGIN PRIVATE KEY----- [Base64 Encoded Private Key] -----END PRIVATE KEY-----

Import into Key Vault: Use the Azure Portal, Azure CLI, or PowerShell to import the certificate.
Reference: Microsoft Docs - Import a Certificate in Azure Key Vault

Also check: howto-create-self-signed-certificate
https://docs.azure.cn/en-us/app-service/configure-ssl-certificate

I hope this clarifies things.