Hi,
this is what I get with
openssl x509 -certopt ext_error -text -noout -in ....
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
X509v3 Key Usage:
Digital Signature, Key Encipherment
1.3.6.1.4.1.311.21.7:
<Not Supported>
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
<Parse Error>
1.3.6.1.4.1.311.21.10:
<Not Supported>
Signature Algorithm: sha1WithRSAEncryption
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Regards
Gerd Wetzel
> -----Original Message-----
> From: Dr. Stephen Henson [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, August 15, 2006 1:54 PM
> To: [email protected]
> Subject: Re: How to display X509 certificate?
>
> On Tue, Aug 15, 2006, [EMAIL PROTECTED] wrote:
>
> > Hi,
> >
> > I have problems displaying a special kind of X509
> certificate. X509_print()
> > returns without error, but afterwards the error stack
> contains an error
> > 'wrong tag'. The openssl x509 utility has no problems with this
> > certificate, neither does the i2d_X509().
> >
> > Is there another possibility, converting a X509 certificate
> into human
> > readable format, or do I have to adopt the part in x509.c ?
> >
>
> That might be an extension issue. X509_print() attempts to
> parse extensions
> and an error like that can occur if an extension is not
> encoded properly.
>
> The extension it fails on will then be printed out in a ASCII dump.
>
> Either post the certificate producing that error or try the
> x509 utility with
> the "-certopt ext_error" option which will give an error
> message on the failig
> extension.
>
> Steve.
> --
> Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
> OpenSSL project core developer and freelance consultant.
> Funding needed! Details on homepage.
> Homepage: http://www.drh-consultancy.demon.co.uk
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [email protected]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
