36 lines
1.1 KiB
ReStructuredText
36 lines
1.1 KiB
ReStructuredText
*************
|
|
Configuration
|
|
*************
|
|
|
|
The account_es_sii module uses the section ``account_es_sii`` to retrieve
|
|
the path of the SSL certificates.
|
|
|
|
``certificate``
|
|
the path to the SSL certificate.
|
|
|
|
``privatekey``
|
|
the path to the SSL private key.
|
|
|
|
.. warning::
|
|
The private key must be unencrypted.
|
|
|
|
How to obtain the certificate and private keys?
|
|
-----------------------------------------------
|
|
|
|
Both values should be extracted from the p12 certificate issued by the
|
|
`FNMT <https://www.sede.fnmt.gob.es/certificados/certificado-de-representante>`_.
|
|
The certificate should be related to the company presenting the information
|
|
or an authorized party.
|
|
|
|
Given a ``cert.p12`` certificate its keys can be extracted with following
|
|
commands:
|
|
|
|
.. code-block:: console
|
|
|
|
$ openssl pkcs12 -in cert.p12 -clcerts -nokeys -out public.crt
|
|
$ openssl pkcs12 -in cert.p12 -nocerts -out private.key
|
|
$ openssl rsa -in private.key -out private_unencripted.key
|
|
|
|
The path to ``private_unencripted.key`` should be used as ``privatekey`` and
|
|
the one to ``public.crt`` as ``certificate``.
|