Thank You,

it works. I can only suggest adding this to FAQ.
--
Konrads Smelkovs
Applied IT sorcery.


On Wed, Aug 12, 2009 at 2:46 PM, Stephen Henson via RT <[email protected]>wrote:

> > [[email protected] - Wed Aug 12 09:02:19 2009]:
> >
> > I have tried this on Windows XP with 8.9.k and on Linux/Ubuntu with
> > -SNAPSHOT two days ago.
> > D:\Documents and Settings\ksmelkovs>"C:\Program
> > Files\OpenSSL\bin\openssl.exe" x509 -inform der -in Desktop\1.cer -text
> > unable to load certificate
> > 5568:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.
> > \crypto\asn1\tasn_dec.c:1316:
> > 5568:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
> > error:.\crypto\asn1\tasn_dec.c:380:Type=X509
> >
> > The certificate is available at
> > http://drop.io/hidden/kgscenvqkwnwze/asset/MS1jZXI=
> > Windows XP built in functionality allows me to examine and import this
> > certificate.
> >
>
> The certificate is not in the correct format for OpenSSL. If you look at
> it is is base64 encoded all on one line. You can convert to DER with:
>
> openssl base64 -d -A -in 1.cer -out 1.der
>
> Steve.
> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org
>
>

Thank You,

it works. I can only suggest adding this to FAQ.
--
Konrads Smelkovs
Applied IT sorcery.


On Wed, Aug 12, 2009 at 2:46 PM, Stephen Henson via RT <[email protected]> wrote:
> [[email protected] - Wed Aug 12 09:02:19 2009]:
>
> I have tried this on Windows XP with 8.9.k and on Linux/Ubuntu with
> -SNAPSHOT two days ago.
> D:\Documents and Settings\ksmelkovs>"C:\Program
> Files\OpenSSL\bin\openssl.exe" x509 -inform der -in Desktop\1.cer -text
> unable to load certificate
> 5568:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.
> \crypto\asn1\tasn_dec.c:1316:
> 5568:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
> error:.\crypto\asn1\tasn_dec.c:380:Type=X509
>
> The certificate is available at
> http://drop.io/hidden/kgscenvqkwnwze/asset/MS1jZXI=
> Windows XP built in functionality allows me to examine and import this
> certificate.
>

The certificate is not in the correct format for OpenSSL. If you look at
it is is base64 encoded all on one line. You can convert to DER with:

openssl base64 -d -A -in 1.cer -out 1.der

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org


Reply via email to