On Wed, 2010-01-27 at 13:19 -0800, George Niculae wrote: > While trying to retrieve the issuer DN for my own sipx signed > certificate (X509 v3) using java.security.cert.X509Certificate I hit a > java.security.cert.CertificateParsingException: invalid DER-encoded > certificate data > exception. > Same code works just fine for other certificates like > Equifax_Secure_Certificate_Authority.crt (X509 v3) or > verisignclass3ca.crt (X509 v1). > > After editing my own certificate and removing all the lines before > "-----BEGIN CERTIFICATE-----" line I managed to retrieve the issuer. > > Doing a quick search - I found that OpenSSL adds some human-readable > info about certificate when signing and this could cause some problems > like the one I hit. Not sure if this is the way it suppose to work or > there is something wrong here.
We leave that preamble information on the text copy of the certificate because it's much easier to read than the base-64 encoded data below it :-) It should be trivial to strip. _______________________________________________ sipx-dev mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-dev Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev sipXecs IP PBX -- http://www.sipfoundry.org/
