thail wrote:
>
> I received the test certificate as a part of an email, and just cut and paste it to
>a files and name it "server.crt".
> So it's not binary, I tried
>
> openssl pkcs7 -inform DER -out certs.pem -in server.crt -print_certs
>
> this is the error :
>
> >unable to load PKCS7 object
> >62:error:0D091007:asn1 encoding routines:d2i_PKCS7:expecting an asn1
>>sequence:.\crypto\asn1\p7_lib.c:162:address=4413776 offset=0
>
> Do you have any idea why ?
> Thanks
>
Failing that does the file have an -----BEGIN and -----END lines? If it
has the word "CERTIFICATE" in there it may be either a certificate or a
PKCS#7 structure or something else. Try:
openssl x509 -in server.crt
Otherewise try changing CERTIFICATE to PKCS#7 and try
openssl pkcs7 -in server.crt -print_certs
Failing that can you mail it to me? This isn't a security risk because
the certificate is public knowledge: if your server is on the internet
it will be sent during every connection anyway and besides you said it
was a test certificate.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
