Cory Winter wrote:
> 
>   openssl pkcs8 -inform PEM -outform DER -in mykey.pem -out mykey.der -topk8
> - convert PEM cert to DER

First thing to note: this will create a key encrypted with 56 bit DES
which may be considered inadequate for some applications.

> I then try to use these DER certs with my C++ and Java apps. The
> Java app seems to work fine, however the C++ app can't seem to
> read in the pkcs8 DER private key information. Is this possible?
> Does anyone have an example code bit to offer on how to do this?
> 

What calls are you using to read the PKCS#8 DER information and what
error do you get?

Currently its a bit messy reading in a DER encoded PKCS#8 structure but
the PEM version is handled transparently with PEM_read_bio_PrivateKey().

I'll add a prettier function that handles DER format for 0.9.5.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to