> I need to convert a SPKAC file (with Netscape Browser generated
> SPKAC=xxxxx) to a PEM format request file.

The short story: You can't.
 
The longer one: The PEM Request (actually PKCS#10 Request)
is signed with the private key of the requester. Since you don't
have access to that key you're out of luck. The "conversion" in ca.c
skipps the test wether the signature is correct und thus doesn't
complaon.

Why would you do so?

> To do so, I patched ca.c (whcih can take a spkac file), added an option
> "-reqout file". According to the code, certify_spkac() creates a X509
> request structure and fills in the fields from the SPKAC file, so that
> the same code (do_body()) can be used to sign the request. I call
> PEM_write_bio_X509_REQ() before the call to do_body().
> lib:pem_lib.c:236
-- 
read you later  -  Holger Reif
------------------------------------ Signaturprojekt Deutsche Einheit
TU Ilmenau - Informatik - Telematik                (Verdamp lang her)
[EMAIL PROTECTED]          Alt wie ein Baum werden, um ueber
Remus.PrakInf.TU-Ilmenau.DE/Reif/    alle 7 Bruecken gehen zu koennen
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+

Reply via email to