Re: cer/b7b/pfc -> pem
On Tue, 18 Jul 2000, Leif Neland wrote: > This works nicely in Windows (Outlook Express), but I'd like to try using > the same key with openssl to generate crypted (to myself) or signed > messages. > > I can export the key as a .cer, .p7b or .pfx, but openssl seems to want it > in .pem format. You need to export your private key (too). Without OE5, this is an option when you attempt to save a cert as a file. - alex To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
Re: cer/b7b/pfc -> pem
On 17 Jul 2000, Daniel Berlin+list.freebsd-current wrote: > "Leif Neland" <[EMAIL PROTECTED]> writes: > > > I have a Verisign personal certificate (Look me up at Verisign, as Leif > > Neland) > > > > This works nicely in Windows (Outlook Express), but I'd like to try using > > the same key with openssl to generate crypted (to myself) or signed > > messages. > > > > I can export the key as a .cer, .p7b or .pfx, but openssl seems to want it > > in .pem format. > > > > What does the p7b file look like? > > And the .cer file, and the .pfx file? > > Are any of them ascii, with a "BEGIN PKCS7" or "BEGIN CERTIFICATE" > line? > With crl2pcks7 I can convert the p7b and cer to a pem, which contain BEGIN PKCS7 , random characters, and END PKCS7 I can't use this to encrypt with, smime wants "BEGIN CERTIFICATE" Leif To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
Re: cer/b7b/pfc -> pem
"Leif Neland" <[EMAIL PROTECTED]> writes: > Apropos pseudorandom, ssh etc; I hope this is not too off-topic, or can > somebody point in the right direction: > > I have a Verisign personal certificate (Look me up at Verisign, as Leif > Neland) > > This works nicely in Windows (Outlook Express), but I'd like to try using > the same key with openssl to generate crypted (to myself) or signed > messages. > > I can export the key as a .cer, .p7b or .pfx, but openssl seems to want it > in .pem format. > What does the p7b file look like? And the .cer file, and the .pfx file? Are any of them ascii, with a "BEGIN PKCS7" or "BEGIN CERTIFICATE" line? > Am I totally confused, or is it possible to convert one of the above to > .pem? > from crl2pkcs7's man page, in the notes section: The output file is a PKCS#7 signed data structure containing no signers and just certificates and an optional CRL. This utility can be used to send certificates and CAs to Netscape as part of the certificate enrollment process. This involves sending the DER encoded output as MIME type application/x-x509-user-cert. The PEM encoded form with the header and footer lines removed can be used to install user certificates and CAs in MSIE using the Xenroll control. > Leif > To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
