>From: [email protected] On Behalf Of Ajith Mamachan >Sent: Tuesday, 18 June, 2013 03:03
>When I generated the cert thru openssl, It not starting with BEGIN CERTIFICATE, >rather with >Certificate: > Data: <snip> >This creates problem in importing the cert to my server. >Anyone knows , whether the format is different or not?Anyone please explain If you used openssl (commandline) 'ca' it puts a human-readable display first as a "comment" and then the actual PEM certificate. 'x509' can be made to do this also. openssl when reading PEM files ignores such "comments" but other implementations don't. You can just edit the file to delete everything except the ----BEGIN line to the -----END line (inclusive). That's the actual cert. If you want the program to do this for you, just run it through 'x509' without making any change: openssl x509 -in cert_with_comments -out cert_without_comments Or you can easily do it with sed or awk on Unix (or on Windows if you have Unix-like tools installed). ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
