> You can't create a PKCS#12 file from this because you don't have the
> private key. Instead you must take the signed certificate and create a
> PKCS#7 file from it:
> openssl crl2pkcs7 -nocrl -certfile cert.pem -out p7.pem
There is no need to do it.
> Then strip off the BEGIN and END lines and feed the result to
> Enroll.acceptPKCS7().
Agan, there is no need for this.
You may feed the certificate itself directly to AcceptPKCS7, like this:
sz10 = _
"-----BEGIN CERTIFICATE-----" & _
"MIICJDCCAY2gAwIBAgIBHjANBgkqhkiG9w0BAQQFADBpMQswCQYDVQQGEwJFRTEZ" & _
.
"WuSfCiKo1LJ/8i6/vKpoDG0oTNSri48y" & _
"-----END CERTIFICATE-----"
Enroll.acceptPKCS7(sz10)
At least newer versions of MSIE treat this ok, and MS documentation
describes it this way.
Kaur
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
