On Wed, Oct 8, 2008 at 12:06 AM, Von Welch <[EMAIL PROTECTED]> wrote:
> Obviously PEM is a base64 encoded something, so you are asking if
> the certificate is always DER-encoded before being base64 encoded.

Yes, that's basically what I was asking, thanks for clarifying.

> AFAIK, Globus is consistent in its method of storing credentials, so
> while that is not well defined, I believe it is invariant.

Yes, I've examined the relevant Globus code (especially
org.globus.gsi.CertUtil), and that seems to be the case.

A slightly different, but related question:

AFAICT from reading RFC2459/3280/5280 (they all say the same thing),
an X.509 v3 certificate is specified to be DER-encoded.  Is that your
interpretation as well?

Thanks,
Tom

> Tom Scavo wrote:
>> In Globus deployments, is a PEM-encoded certificate *always* a base64
>> encoding of the DER-encoded certificate?

Reply via email to