Generating Certificates

This iDEAL payment gateway uses openSSL certificates to communicate between Drupal Commerce and iDEAL. In order to create a public and a private key execute the following steps:

1. Download the "OpenSSL Library" from http://www.openssl.org. You can find more information on the "certificate generating utility" at: http://www.openssl.org/docs/apps/req.html. You may also generate the key pair using other software. If so please use the manual that comes with your software. Always make sure you have the latest version installed to be sure that your implementation applies to the latest security standards.
2. Generate an "RSA private key" using the following command(choose your own password for the field [privateKeyPass]):
   openssl genrsa –aes-128 –out priv.pem –passout pass:[privateKeyPass] 2048
   Remember the password [privateKeyPass], you will need to enter it in Drupal as well.
3. Create a certificate based on the "RSA private key" (use the same password as in the previous step for the field [privateKeyPass]):
   openssl req –x509 –sha256 –new –key priv.pem –passin pass:[privateKeyPass] -days 1825 –out cert.cer
   This OpenSSL command will generate a certificate in X.509 format, with a validity period of 5 years (1825 days), the maximum for iDEAL signing certificates.
4. The file priv.pem contains the private key. The file cert.cer contains the certificate with the public key. The Merchant has to keep the priv.pem file private, which is used in the RSA encryption. The cert.cer file has to be communicated to the Acquirer.