Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

If you aren't able (or willing) to setup openssl set up OpenSSL on your windows machine, there are various GUI wrappers around the toolset which that you might be able to use instead. XCA is an open-source wrapper around the OpenSSL toolset which allows you to create keys, csrs and certificates via a GUI and stores all of the generated items in a database file.

First, you need to download XCA, which is an open-source wrapper around the openssl OpenSSL toolset from:
http://sourceforge.net/projects/xca/

...

This proprietary database is useful for the xca XCA tool only and helps you store your keys, csrs, and certificates, the database file is not used in any part of the process with Betfair.


Equivalent Open SSL Command - Create a public/private RSA key pair using opensslOpenSSL

openssl genrsa -out client-2048.key 2048

...


  • Create a public/private RSA key pair using xcaXCA:

Image RemovedImage Added
 

Equivalent Open SSL Command - Create a certificate signing request (CSR).

openssl req -new -config openssl.cnf -key client-2048.key -out client-2048.csr

 


  • Select the Certificate signing requests tab and click New Request
  • Select the CA template and click the Apply Extensions button.

Image Removed

...

  • Please ensure that the Signature algorithm SHA 512 is selected.


Image Added


  • Click on the Subject tab and enter the name etc.
  • The key that you generated in the first step must be selected (if the key doesn't appear, check the "Used keys tool" box)


Image Removed Image Added


  • Click on the Extensions tab
  • Ensure that Certification Authority is selected as the type.
  • Click OK.

Image RemovedImage Added

  Equivalent Open SSL Command - Self-sign the certificate request to create a certificate

...

  • Click the Certificates Tab and click New Certificate
  • Click on the Subject tab  tab and enter the name etc.
  • The key that you generated in the first step must be selected (if the key doesn't appear, check the "Used keys tool" box)

Image Removed


 Image Added

 


  • Click on the Source tab and select the parameters shown below:

 

Image RemovedImage Added

 


  • You should make sure that your CSR is selected but that “Copy extensions from the request” is unticked and that you have selected the [default] HTTPS_client CA and pressed the “Apply extensions” button.

Image RemovedYou can then press OK to create the self-signed certificate .(see the result below)

Image Added

Next, we need to export the key and the certificate for use in our application.

  • Export the private key and Certificate. These files should be used in the authentication process and should be referred to in your code where the private key (the .pem file) and certificate file (the .crt file) are mentioned. You can also export to other formats such as PKCS 12 depending upon the format expected by your language/library of choice.

...

Image Added

Info

You should upload the .crt file exported to the My Security page on Betfair.com to allow this certificate access to your account.

...