Hi,

On Fri, Mar 26, 2010 at 7:59 AM, Robert Segall <[email protected]> wrote:
> Most likely your CA certificate is not in PEM format. Have a look if it
> contains something like

sure looks like it is ... and every other app that uses it seems to
recognize it as a .pem cert. here's what it contains,

 cat CAcert.pem

 -----BEGIN TRUSTED CERTIFICATE-----
 MIIH1TCCBb2gAwIBAgIES6qmYzANBgkqhkiG9w0BAQ0FADCB8jEYMBYGCgmSJomT
 ...
 BgEFBQcDCQ==
 -----END TRUSTED CERTIFICATE-----

note, however, the difference ... "TRUSTED".    i _believe_ this is a
result of specifically adding trust for the CAcert as a signer for an
OCSP global responder, with

    openssl x509 -inform PEM -in CAcertp.pem -addtrust OCSPSigning
-outform PEM -out CAcert

Is pound, perhaps, thrown off by the presence of the "TRUSTED", or
something else?

thanks.

--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.

Reply via email to