Hi Jim, the response is a base64 encoded PKCS7 structure - so to get the certificates from the response this would be a good starting point:
wget https://oxi-ee-demo.whiterabbitsecurity.com/.well-known/est/cacerts -O - | base64 -d | openssl pkcs7 -inform der -print_certs I dont know this container project but after having a quick look it looks like there is no HTTPS Setup which is required to make EST work (at least if you want to use it with TLS Authentication). You might also consider to use the docker builds from the project (be warned that this is considered beta): https://github.com/openxpki/openxpki/tree/develop/docker Oliver Am 01.05.19 um 20:40 schrieb Jim Titus: > I’m trying to get EST working in a Docker container (started with dime’s > OpenXPKI image from Docker Hub). To test, I’m using the syntax from the > Cisco test server site (with the appropriate changes for my server of > course). When I request the server certs via EST I get a base64 > response, but there is no BEGIN and END, just the base64 text. When > converting it to PEM format (again using the syntax from the Cisco test > site) I get this error: > > 4612744812:error:0D07207B:asn1 encoding routines:ASN1_get_object:header > too long:asn1_lib.c:157: > > Any ideas? > > —Jim > > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users > -- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
