Re: [Freeipa-users] PEM and DER certificate formats

2012-01-06 Thread John Dennis
On 01/06/2012 04:55 PM, Rob Crittenden wrote: The cli outputs a base64 blob of data. Yes, it output a base64 blob to stdout. But that base64 blob is completely non-standard as an exchange format, it's just a textual encoding of the binary DER data. However the cli can write PEM format to a

Re: [Freeipa-users] PEM and DER certificate formats

2012-01-06 Thread Stephen Ingram
Yes, the Java keystore appears only to accept DER, but I agree, it's the exception rather than the rule. And, yes, a simple command: openssl x509 -in cert.pem -inform PEM -out cert.der -outform DER does the trick--I just confirmed that it works. As I had seen quite a bit of discussion regarding t

Re: [Freeipa-users] PEM and DER certificate formats

2012-01-06 Thread John Dennis
On 01/06/2012 04:45 PM, Stephen Ingram wrote: I noticed a message on here some time ago about changing IPA to output certificates in PEM format instead of DER. I see that in version 2.1.4, the UI does indeed output in PEM format. It appears as though the CLI still outputs in DER. Is this the case

Re: [Freeipa-users] PEM and DER certificate formats

2012-01-06 Thread Rob Crittenden
Stephen Ingram wrote: I noticed a message on here some time ago about changing IPA to output certificates in PEM format instead of DER. I see that in version 2.1.4, the UI does indeed output in PEM format. It appears as though the CLI still outputs in DER. Is this the case? I agree that PEM is ce

[Freeipa-users] PEM and DER certificate formats

2012-01-06 Thread Stephen Ingram
I noticed a message on here some time ago about changing IPA to output certificates in PEM format instead of DER. I see that in version 2.1.4, the UI does indeed output in PEM format. It appears as though the CLI still outputs in DER. Is this the case? I agree that PEM is certainly more typical, ho