Re: Require help to understand a .crt file

2010-10-06 Thread colombus

Hi
I tried and I am getting following output
openssl x509 -inform PEM -in online.crt -noout -text  text.txt
unable to load certificate
844:error:0906D06C:PEM routines:PEM_read_bio:no start
line:.\crypto\pem\pem_lib.
c:650:Expecting: TRUSTED CERTIFICATE

openssl x509 -inform DER -in online.crt -noout -text
unable to load certificate
3756:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong
tag:.\crypto\as
n1\tasn_dec.c:1316:
3756:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
error:.\
crypto\asn1\tasn_dec.c:380:Type=X509

Sorry its actually a digital signature and i need to verify it

Jakob Bohm-7 wrote:
 
 On 05-10-2010 07:01, colombus wrote:

 Hi

 I am new Cryptography and Open SSl I have file online.crt The spec says
 it
 contains an online certificate which is having a public key , a signature
 filed etc. I want extract these details from the file I need to know what
 type of file is online.crt Is there any open SSL command to find or
 verify
 it ??
 
 openssl x509 -inform DER -in online.crt -noout -text
 
 OR if the CRT file looks like some text with a lot of  at the top:
 
 openssl x509 -inform PEM -in online.crt -noout -text
 
 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing Listopenssl-users@openssl.org
 Automated List Manager   majord...@openssl.org
 
 

-- 
View this message in context: 
http://old.nabble.com/Require-help-to-understand-a-.crt-file-tp29883887p29890133.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Require help to understand a .crt file

2010-10-06 Thread Dr. Stephen Henson
On Tue, Oct 05, 2010, colombus wrote:

 
 Hi
 I tried and I am getting following output
 openssl x509 -inform PEM -in online.crt -noout -text  text.txt
 unable to load certificate
 844:error:0906D06C:PEM routines:PEM_read_bio:no start
 line:.\crypto\pem\pem_lib.
 c:650:Expecting: TRUSTED CERTIFICATE
 
 openssl x509 -inform DER -in online.crt -noout -text
 unable to load certificate
 3756:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong
 tag:.\crypto\as
 n1\tasn_dec.c:1316:
 3756:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
 error:.\
 crypto\asn1\tasn_dec.c:380:Type=X509
 
 Sorry its actually a digital signature and i need to verify it
 

Then you should use the smime or cms command instead.

Something like...

openssl smime -verify -inform DER -in online.crt -noverify

initially to test it then with:

openssl smime -verify -inform DER -in online.crt -CAfile ca.pem

with an appropriate CA certificate.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Require help to understand a .crt file

2010-10-05 Thread colombus

Hi 

I am new Cryptography and Open SSl I have file online.crt The spec says it
contains an online certificate which is having a public key , a signature
filed etc. I want extract these details from the file I need to know what
type of file is online.crt Is there any open SSL command to find or verify
it ??
-- 
View this message in context: 
http://old.nabble.com/Require-help-to-understand-a-.crt-file-tp29883887p29883887.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Require help to understand a .crt file

2010-10-05 Thread Jakob Bohm

On 05-10-2010 07:01, colombus wrote:


Hi

I am new Cryptography and Open SSl I have file online.crt The spec says it
contains an online certificate which is having a public key , a signature
filed etc. I want extract these details from the file I need to know what
type of file is online.crt Is there any open SSL command to find or verify
it ??


openssl x509 -inform DER -in online.crt -noout -text

OR if the CRT file looks like some text with a lot of  at the top:

openssl x509 -inform PEM -in online.crt -noout -text

__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org