why -issuer option in OCSP client options must be PEM format?

2003-06-17 Thread Wu Junwei 



Hi,all,

Could some one tell me kindly why the -issuer option in the OpenSSL OCSP 
client options MUST be PEM format ?


thanks,

wjw

Re: why -issuer option in OCSP client options must be PEM format?

2003-06-17 Thread Wu Junwei 



And,

Is that ONLY because the FORMAT_PEM in load_cert() in app.c?

How about if I change it like following: (can I input the pkcs#12 file or 
asn.1 file after doing such changing?)

load_cert(bio_err, *args, FORMAT_PKCS12, pass, e, "issuer certificate"); 

/*I think I should also add the pass in the PKCS12_parse(p12, 
NULL, NULL, x, NULL) in load_cert();
*/

or 

load_cert(bio_err, *args, FORMAT_ASN1, pass, e, "issuer 
certificate");

or 
others ?


Why there is no such notice on -cert option? It also uses FORMAT_PEM.

Thanks ,
wjw

- Original Message - 

  From: 
  Wu 
  Junwei 
  To: [EMAIL PROTECTED] 
  Sent: Tuesday, June 17, 2003 6:07 
  PM
  Subject: why -issuer option in OCSP 
  client options must be PEM format?
  
  Hi,all,
  
  Could some one tell me kindly why the -issuer option in the OpenSSL OCSP 
  client options MUST be PEM format ?
  
  
  thanks,
  
  wjw

Re: why -issuer option in OCSP client options must be PEM format?

2003-06-17 Thread Kiyoshi WATANABE 

Hello,

As you can see, the default certificate format is PEM in openssl
command. I do not know the excact reason, but I agree that the ocsp
command had better to have format option if you are requesting so. 

-Kiyoshi
Kiyoshi Watanabe

 Hi,all,
 
 Could some one tell me kindly why the -issuer option in the OpenSSL OCSP
 client options MUST be PEM format ?
 
 
 thanks,
 
 wjw
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]