PavanKumar Sura schrieb: > > I was trying to convert the ra cert from pem format to p12 so that I can use > it in Netscape mail for decryption.
Why you don't use the RA for this? If you go to a certificate and the private key is in the database too then you can download it directly from the webinterface of the RA. > First of all i couldnot find the ra cert in the > /home/pkira/public_html/pavansura/openca-0.9.1/OpenCA/var/crypto/certs > directory even though I did do "Import ALL" from the ra server and also > added to Ldap... This directory is only present for OpenSSL's ca command. We don't take care of this directory. We only use the database. > I just see a lastImport.txt file The we store the serials of the last imported certificates. > So I did "tar -xvf" to the openca-outca.tar file and went to > ../CERTIFICATE/VALID directory where i fould the 1.pem (CA Operator) and > 2.pem (RA) > > When i type on unix: > openssl pkcs12 -export -out ra_cert.p12 -in 2.pem > I get the following error > ======================================================= > Error loading private key > 2216:error:0906D066:PEM routines:PEM_read_bio:bad end line:pem_lib.c:762: > ======================================================= > > Where is the private key ? when i opened the 2.pem i see the key encrypted > inside the certificate file.. > > In the actual command I should be providing the "-inkey userkey.pem" option > but since I didnot find any key file I didnot use this option... You can simply make two different files - one with the certificate and one with the key but please take in mind that there is webinterface for exactly this conversion. Michael -- ------------------------------------------------------------------- Michael Bell Email (private): [EMAIL PROTECTED] Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 Unter den Linden 6 Fax: +49 (0)30-2093 2959 10099 Berlin Germany http://www.openca.org ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
