Hi,

I'm writing a program that should:
  1. Generate openssl RSA key pair
  2. Generate a openssl CSR
  3. Use the MS ICertRequest control to sign it
  4. Get the signed certificate back
  5. Package the private key and cert into a P12 file using openssl

Everything is fine until 3 when I send it to the CA. The request makes it and gives an invalid ASN.1 error.
I've tried PEM (With header), binary, base64 binary(No Header). The CSR is valid, at least as far as openssl is concerned
because it parses alright. The only thing weird is that my request has the header ---- BEGIN CERTIFICATE and the one that shows up in the CA has ----BEGIN NEW CERT reqardless of the way I send it. Could the problem be in the char * To BSTR conversions? The data that's in the
CA error file matches the data I'm seeing before conversion. Any help would be appreciated.

                                  Mark S

This e-mail, including attachments, may include confidential and/or
proprietary information, and may be used only by the person or entity to
which it is addressed. If the reader of this e-mail is not the intended
recipient or his or her authorized agent, the reader is hereby notified
that any dissemination, distribution or copying of this e-mail is
prohibited. If you have received this e-mail in error, please notify the
sender by replying to this message and delete this e-mail immediately.

Reply via email to