Hi Sergei,

On Thu, Aug 23, 2007 at 10:05:28AM +0400, Sergei Vyshenski wrote:
> Let me suggest the following criterion to distinguish 
> DER/PEM for the uploaded CSR:
> 
> if (all bytes of the CSR belong to the BASE64 subset) 
> then (it is PEM,
>       if header/footer pair is present, 
>             let CSR go to the openssl as PEM,
>       else add header/footer pair 
>             and let CSR go to the openssl as PEM
>      )
> else (it is DER, let CSR go to the openssl as DER)
> 
> What do you think?
Sounds good to me. I believe we also already add the header/footer to
the PKCS#10 generated by IE, which has a similar issue.

Best regards,
    Alex
-- 
Dipl.-Math. Alexander Klink | IT-Security Engineer
        [EMAIL PROTECTED] | working @ urn:oid:1.3.6.1.4.1.11417

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
OpenXPKI-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-devel

Reply via email to