# Configuration

The account_es_sii module uses the section `account_es_sii` to retrieve the path of the SSL certificates.

`certificate`

  the path to the SSL certificate.

`privatekey`

  the path to the SSL private key.

Warning

The private key must be unencrypted.

## How to obtain the certificate and private keys?

Both values should be extracted from the p12 certificate issued by the FNMT. The certificate should be related to the company presenting the information or an authorized party.

Given a `cert.p12` certificate its keys can be extracted with following commands:

    $ openssl pkcs12 -in cert.p12 -clcerts -nokeys -out public.crt
    $ openssl pkcs12 -in cert.p12 -nocerts -out private.key
    $ openssl rsa -in private.key -out private_unencripted.key

The path to `private_unencripted.key` should be used as `privatekey` and the one to `public.crt` as `certificate`.