Dave wrote:

> bash% openssl crl -inform DER -in keon2.crl -text
> unable to load CRL
> 6062 error:0DA4008:asn1 encoding routines, etc. etc. etc.

> Does anyone have any experience using Keon CRL's with OpenSSL ?

Is the crl base64 encoded? If so, leave out the -inform DER option.

I know, I know, this sounds like it won't work. But just today I 
obtained a trial cert from Verisign's Web site. The CSR was created 
using RSA's tools. Verisign sent back a Base64-encoded cert and I 
used identical options to yours (but using x509 instead of crl) and 
got the very same error you did. When I left out the -inform DER, bingo!
it worked.

You figure.


John
[EMAIL PROTECTED]
www.darkspell.com
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to