There are a couple of problems. I've seen CreatePKCS10 output containing
URL escapes, try translating those first. The output of CreatePKCS10 can
also be just a single line, which OpenSSL doesn't like. Try insering LFs
every 64 characters or so.
You can't create a PKCS#12 file from this because you don't have the
private key. Instead you must take the signed certificate and create a
PKCS#7 file from it:
openssl crl2pkcs7 -nocrl -certfile cert.pem -out p7.pem
Then strip off the BEGIN and END lines and feed the result to
Enroll.acceptPKCS7().
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
