> From: [email protected] On Behalf Of Shashidhar Reddy
> Sent: Friday, 16 July, 2010 15:30
> The below command is giving erros and not sure how to fix this. Any
help is much appreciated.
> openssl pkcs12 -info -in renewal.pkcs12
<snip: asn1 stack>
Your file apparently isn't correctly encoded. Either:
- the file was bad to start with or got damaged in transit
- or there's something seriously wrong with your openssl.
Try 'openssl asn1parse -inform der -in renewal.pkcs12'
to see if it looks like valid ASN.1 (DER) at all.
If so, check to see what openssl you are running
('which openssl' on Unix or 'type openssl' in bash,
'openssl version -a' anywhere); if it's not a stock version
(from official source or a known-good distro) try again
with a known-good version. Or if your data is not really
private (e.g. only for testing) or is protected by a
strong passphrase, post it here for others to try.
If not, where and how did you generate or get the file?
Some of kinds of transfers, nowadays particularly FTP,
try to translate EOL codes; for a binary encoding like DER
(including PKCS12) this destroys the file integrity.
Some transfers can also truncate data sometimes.
Ideally you should check your file is byte-for-byte identical
with the original; since this is unduly tedious, check the size
(EOF) is exactly the same, and do a hash such as MD5 or SHA1
(or have the sender do it) on both the original and your copy
and check they match for at least the first 5 or so hex digits.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
