Manuals iDEAL v3 and SSL certificates

iDEAL v3 and SSL certificates

To use the iDEAL Advanced v3 variant, it is necessary to generate your own private key and certificate.

Windows

Install OpenSSL Light

Download openssl.zip, extract it and install the program OpenSSL Light.exe.

Generate a private key and certificate

Start OpenSSL (installation directory/bin/openssl.exe) and then run the following two commands:

To generate a private key file, run the following command:

genrsa –aes128 –out file name.key –passout pass:password 2048

In the command, replace “password” with a self-chosen password. Keep this password safe, it is needed within the Pronamic iDEAL configuration and when generating a certificate.

To generate a private certificate file, run the following command:

req –x509 -sha256 –new –key file name.key –pass pass:password -days 1825 –out file name.cer

Replace “password” with the previously chosen password in this command as well.

Linux / Unix / Mac

From the terminal, run the following two commands:

To generate a private key file, run the following command:

openssl genrsa -aes128 -out file name.key -passout pass:password 2048

In the command, replace “password” with a self-chosen password. Keep this password safe, it is needed within the Pronamic iDEAL configuration and when generating a certificate.

To generate a private certificate file, run the following command:

openssl req -x509 -sha256 -new -key file name.key -pass pass:password -days 1825 -out file name.cer

Replace “password” with the previously chosen password in this command as well.

Configure certificates for iDEAL

Upload the files file name.key and file name.cer to the Pronamic iDEAL configuration. Also enter the used password within the Pronamic iDEAL configuration.

Do you have access to an iDEAL subscription with the ABN AMRO, Rabobank or ING bank, then upload your file name.cer via iDEAL Dashboard (on both the TEST and LIVE dashboard).

If the iDEAL configuration fails, you can also outsource the configuration, generation of SSL certificates and activation to Pronamic.