Hi,all
I am studying the openssl ocsp.
I would like to know , when use the -signer or -signkey option of the OCSP,
is there any format limitation of this signer file or signer key file?
I have a PKCS#12 certificate1(can be found in the end of this mail ) which
contains private key and the certificate itself.
But it seems the program can not get the private key.
And when I use a PKCS#12 certificate2 exported from IE, it is a pfx file ,
to test the load_key() function in app.c,
(of course I changed the argument to FORMAT_PKCS12 ), it seems it
can get the private key.
so I do not know which certificate file format the load_key() can
use.
please find the certificate1 as following:
-----BEGIN CERTIFICATE AND
KEY-----
MIIFyAIBAzCCBYIGCSqGSIb3DQEHAaCCBXMEggVvMIIFazCCBWcGCSqGSIb3DQEH AaCCBVgEggVUMIIFUDCCAuwGCyqGSIb3DQEMCgECoIICpTCCAqEwGwYKKoZIhvcN AQwBAzANBAjQlMY92w6X9AIBAQSCAoD0TaW6WgWPuC3qtmTzYg7fIKoDCcrPuXUB 2VKIT2dAasYliBiTT/Hfq+JbIHgtvrh9vZrOai4PjtCPk3qFd1+4mOSP1kdKd9WF O6wuxJ6t1tYUmxeiDRSzfUj0rKmZI+aO8K6Hz0ExF6IElJfO4WnKjxOdZN/cCs09 QvQ8pOoTkB9yVAx5bAP4cpmb0c3Av5ZOsPYwufIfK5n28wqtKwjcmpCrIvxYIqAV VF6v/yUD4gf+VzMHNZewliZTkr2kuFmY5Et7DD5X7QxHwC7WcKF77MbdEAuPvX6G ERWKpNWBT0n6fn4QZwjwgz1u3z6Itd1Z/uKWtbIcG5hJDjkaCNdny09LlYqt2hRA BwXbynmJit1K0LbyBmYdkkVAtc+j5tQnsRwG84H6y5TALvmq/vT3wx2w6nnWnuo2 U+sIc3VVUCWS2lIhXQrbVeuHDUmAJYMkO7BUaRN+8nlTEvtc4+KeR1dSH32Wu+64 0SYPTCb/aLnI5AQ4OlMoGIAXhkouXhoyrh9wdB9aR6aX+EaytsUV/5m8mUA1kR8B GPbyzTUKn/DoMYTGDhZX2f5pTAmIXLJHNnZzmj1QistoLPls2T/hoeKmtAYB/zGe BzhgTvFbelz1t218FxoNYYdM0EzVAIyIavwxerr2eEV6asPOo06aFr8GiqVSOoH2 Dftfr74LIQkNPVPHiicuZe/GY8k3T+ZEktf95K2fdv/yqV2RS5UkAhIvw4eoZhAM haows7+t19AYPIYPmzdjQchCMpoXIskQFpiVcjGfvhFuWesNr6K44JLYdkrlqghW s0SQOPq9VsKig3M0OaJjfq9GC7oK/dys6AwP6fULqsuCXTJa5YCUMTQwEwYJKoZI hvcNAQkVMQYEBAAAAAEwHQYJKoZIhvcNAQkUMRAeDgBDAEEAVABlAHMAdAAyMIIC XAYLKoZIhvcNAQwKAQOgggIVMIICEQYKKoZIhvcNAQkWAaCCAgEEggH9MIIB+TCC AWICEQDlXm++E1gfFQkkk0Dg8YW8MA0GCSqGSIb3DQEBBQUAMD0xCzAJBgNVBAYT AkpQMRIwEAYDVQQKEwlGdWppeGVyb3gxDDAKBgNVBAsTA0NTVzEMMAoGA1UEAxMD Q0EyMB4XDTAzMDUyNzA5MTAwM1oXDTA2MDQyMTEwNTQyN1owPTELMAkGA1UEBhMC SlAxEjAQBgNVBAoTCUZ1aml4ZXJveDEMMAoGA1UECxMDQ1NXMQwwCgYDVQQDEwND QTIwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAO9g67ZZbAoioMv3CR/MtxYN L86A7J0YeqkeF0XCf+Wd2Th8XYtboZ5wQJlU3iQQ4LhrBnS3xY/sA2E1s1dp0gPg jhWz86zyJ5GGry4pup92QQO0HO37sMNcZZuaF1wM1ODeuYe4UKgetKQ7Qet/LZ5U 1GMME0pe6PjxktndsKyrAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAKCamIr1EFXdU ErE+lzloaVrpTE5sXZGCQ9cCxo3g9f6aHVFrmk+StUh7w5zncHwbY06+5MULErmq uM5UEKghRgsf6VTm1ZZ9s/hNJCnVRoke+ygRgBcGlMVKsNbkUb7fNAvzK59/JgUb HK6hiwdsmFucBIU7M3AaSoEno5YdKfAxNDATBgkqhkiG9w0BCRUxBgQEAAAAATAd BgkqhkiG9w0BCRQxEB4OAEMAQQBUAGUAcwB0ADIwPTAhMAkGBSsOAwIaBQAEFHzx Hp5ZCv/uUFkkYzUuzTV9qABpBBTMTvjWl0oMaHPg2M413sSoHUKEmwICBAA= -----END CERTIFICATE AND KEY----- Thanks,
wjw
|