GuruGnanam,

I had problems reading files I received until I realized there were blank lines at the 
end.  I think this was the problem.

Chuck

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 17, 2004 11:13 AM
To: OpenSSL Users Mailing List
Cc: [EMAIL PROTECTED]
Subject: Convert x509 to ASN.1/DER Format






I have some problems in using the certificates provided by our ThirdParty
for SSO.

We are using openssl library to Encrypt and our ThirdParty uses
BouncyCastle/java to decrypt. We have issues in understanding the
Certificate file send by our Third Party. They provided the key as a
certificate. The format of the certificate is x509.

For Encryption, we use:
 RSA_public_encrypt(rsa_size,from,out,RSAKey->RSA_Key,RSA_NO_PADDING)

Format of the Key that We are expecting is:OPENSSL:PUBLIC:BASE64:

But when we am trying to read the Certificate given by or ThirdParty, we
got the below error:

13:04:01.281719   RSA Error: error:0D06B078:asn1 encoding
routines:ASN1_get_object:header too long

13:04:01.281933   RSA Error: error:0D09E082:asn1 encoding
routines:d2i_RSAPublicKey:parsing

Also I used :
1.  openssl x509 -in <dir>/TF.cer -out  <dir>/TF.der  -pubkey

2.  openssl x509 -in <dir>/TF.cer -out <dir>/TF.pem -pubkey

13:04:01.281719   RSA Error: error:0D06B078:asn1 encoding
routines:ASN1_get_object:header too long

13:04:01.281933   RSA Error: error:0D09E082:asn1 encoding
routines:d2i_RSAPublicKey:parsing


Still I got the error:

Can you tell me how to convert that x509 to ASN.1/DER Format

Thanks,
GuruGnanam Subramanian,
iNautix Technologies, Chennai, India
Tel: 91-44-2254 6000  Ext: 1099

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to