> From: owner-openssl-us...@openssl.org On Behalf Of ZK_ALI > Sent: Monday, 13 September, 2010 08:49
> openssl smime -sign ... -signer <certificate> > certificate = abc.p7b > Loading 'screen' into random state - done > unable to load certificate > 2140:error:0906D06C:PEM routines:PEM_read_bio:no start > line:.\crypto\pem\pem_lib.c:663:Expecting: TRUSTED CERTIFICATE > Can't read signer certificate file abc.p7b > > Can you please help me out for the same? > Clearly abc.p7b does not contain a certificate in PEM format, as smime -sign needs. >From the name, it could be a (PEM?) PKCS#7 that carries the cert or cert chain, possibly with other data. PKCS#7 was originally designed to transport data with certs and/or CRLs "on the side", but is now used largely for the latter purpose not the former. If so, use openssl pkcs7 -in abc.p7b -print_certs >abc.cer plus -inform DER if it's nonPEM and -text if you like to get (just) the cert(s) to a file, and if there is more than one cert, delete all but the correct one. Use that. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
