I'm busy so partial reply : >>if you DER encode instead of PEM encode the data it appears to be much smaller. Is that correct?
I guess yes, binary format. >>Now if you want to send a certificate to some one is it possible to send it DER encoded? Yes, as a .cer file. >> Do you create the cert DER encoded in the first place? No, better working with PEM format and converting later when needed with openssl x509 -inform PEM -outform DER -in ... -out ... Barbara Post -----Message d'origine----- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Frank Envoy� : mercredi 17 septembre 2003 19:58 � : Openssl user grp Objet : Certificate, encoding and signing questions. Well I have a few questions here so hopefully I can get this straight, if I'm lucky. Certificates - Now I have worked with RSA certificates, but if I wish to do DSA instead of RSA signatures I need to create DSA certificates right? If so anyone have examples laying around? Encoding - Now from some testing I did with PKCS7 structures before if you DER encode instead of PEM encode the data it appears to be much smaller. Is that correct? Now if you want to send a certificate to some one is it possible to send it DER encoded? Do you create the cert DER encoded in the first place? If so how is that done? Then how is it read in? I have only used PEM type functions to read in a x509 cert/private keys. Signing data - can I use the sam EVP functions that I did before to sign with RSA to do DSA? Any help would be appraised. Frank ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] _____________________________________________________________________ Envie de discuter en "live" avec vos amis ? T�l�charger MSN Messenger http://www.ifrance.com/_reloc/m la 1�re messagerie instantan�e de France _____________________________________________________________________ Envie de discuter en "live" avec vos amis ? T�l�charger MSN Messenger http://www.ifrance.com/_reloc/m la 1�re messagerie instantan�e de France ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
