Just so that I don't mislead you here, the formats mentioned here are NOT
certificate types, but rather the formats to store the certificates. So, to
answer your question directly, you can use openssl to create a certificate
in PEM format, for example, then create a PKCS12 format storing the newly
created certificate:
openssl pkcs12 -export -in file.pem -out file.p12 -name "My Certificate"
The example was taken directly from pkcs12 man page, so I hope that's right.
-------------------------------------------------
Peter Kim
Software Developer
Xcert International Inc.
URL: http://www.xcert.com
homepage: http://home.xcert.com/~pckim
ph 604 640 6210 ext 268
Explicitly trust my certificate or download the Xcert Internal Repository
CA to verify my signature.
URL:https://wsca.xcert.com:444/send-ca-cert.xuda?CA=3fb7cf984e10a9c46c5ac9de
ab0bf6f2
-------------------------------------------------
> > Outlook Express and MSIE takes certificates of the following types
> > (more than one certificate can be stored in each file):
> >
> > Personal Information Exchange - PKCS 12 format (.PFX)
> > Cryptographic Message Syntax Standard - PKCS 7 format (.p7b)
> > Microsoft Serialized Certificate Store (.sst)
> >
> > I don't think the file extensions are important because from MSIE
version
> 5,
> > you can have your IE import Netscape certifcates and vice versa.
> > I only tried PKCS12 formats for importing, but others should work.
> > I haven't tried generating the certificates using 'openssl' program, but
> the
> > options to make PKCS12 and PKCS7 formats are available. Read the
> > appropriate man pages (pkcs12 and pkcs7).
> >
> > If you are planning to use the certificate for signing your outgoing
> e-mail
> > messages, you will need to put your e-mail address you want to use in
the
> > certificate (as part of its DN) and also, you'll need to trust the
issuer
> > certificate(s) of the certificate you're using.
> >
> > If I'm wrong on any of this, feel free to correct me.
> >
> >
> > >
> > >
> > > Hi,
> > >
> > > sorry for this stupid question:
> > > how can I create a certificate compliant with MS OutlookExpress and/or
> MS
> > > IE? What kind of format may I use (DER, PEM, CER, .....)?
> > >
> > > Thanks
> > >
> > > Rosario
> > >
> > >
> > > ______________________________________________________________________
> > > OpenSSL Project http://www.openssl.org
> > > User Support Mailing List [EMAIL PROTECTED]
> > > Automated List Manager [EMAIL PROTECTED]
> >
>
smime.p7s
