I'm trying to generate a simple self signed cert that Navigator will accept
but it's not working.  Navigator pops up a window that says "The security
library has encountered an improperly formatted DER-encoded message."  What
am I missing?

The cert generation and s_server's output:

    % openssl req -new -x509 -nodes -out server.pem -keyout server.pem
    [...]
    % openssl verify -verbose server.pem
    server.pem: OK
    % openssl s_server -cert server.pem                      
    Using default temp DH parameters
    ACCEPT
    ERROR
    2284:error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad 
certificate:s3_pkt.c:774:SSL alert number 42
    shutting down SSL
    CONNECTION CLOSED
    ACCEPT

server.pem contains:
-----BEGIN RSA PRIVATE KEY-----
MIICXgIBAAKBgQDKbhifOFEYLVr+hJaxWoj4dxqPr5AA7hDh3Y/La1O/0s+ZRy4X
RUpjvCK7Pjln+w4jz428rNtVKgLhrZVvE0OtSDhUrn3xPIZ90tW8keqyEpv3K0Vz
y+9X1dM2Q7PehYLIz9uNaEM1Q67wCz/bli0c4CbGsf9SIvFUoCzK0cMGxwIDAQAB
AoGBAIMJJ4kRlHT5DxkITN+7QkTMHHZ8Z9QiRu1eVbGQ5SKb3ORUjkJkCRZsd3ML
gW+MtQd7WD2VC1mim0Do8312U+yVYxupzp3/HVtYiSF6j/ToUKXk2GKO7vZAha5M
ueXGh2c7NYK807QIaf4sao17u4/c91v1l1QmorIC/BvSRzzJAkEA75yHEvUfZ82c
6OkcIjZcCpteZzVxLVVn8chxK5SdQ9I2QvtvvgYbHMmT500+RZEVpC0YzxR2h1Fc
zKr45YmJMwJBANhGirvxoJwFLns8whxJlWXDMFSatb0SfIVhPqyTICk5lhzrbL6d
SUreAaOdTMVsoUdimEiHrU5CCap/BWyvlB0CQQDMsRkq9sA3ew0aY1mnWGzUmtnQ
rXTb12QOxr73DeQzNfcozYct/CVZOFLje7dA0qp8MBJLhR2kh7sRFNW/sPjFAkBx
TdOUzuuTkWteiOAwraQlIfMJ/9tCaJLv1ZheFN3+evrXv8bCvegN3u0A6IG11ElR
+qdJKDt1CkfCGLWg0QNJAkEAguplpAPkT8oq0bVF+VSzOwTa9/nzk63E1RyAHpxq
3qpaws8okFO0idXsJg+/npfWcZbfIVx+s2yqSCs4CH6KGQ==
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
MIIC5jCCAk+gAwIBAgIBADANBgkqhkiG9w0BAQQFADBOMQswCQYDVQQGEwJVUzEO
MAwGA1UECBMFSWRhaG8xDjAMBgNVBAcTBUJvaXNlMR8wHQYDVQQKExZJbi1TeXN0
ZW0gRGVzaWduLCBJbmMuMB4XDTk5MDcyNjIwMzIwNFoXDTk5MDgyNTIwMzIwNFow
TjELMAkGA1UEBhMCVVMxDjAMBgNVBAgTBUlkYWhvMQ4wDAYDVQQHEwVCb2lzZTEf
MB0GA1UEChMWSW4tU3lzdGVtIERlc2lnbiwgSW5jLjCBnzANBgkqhkiG9w0BAQEF
AAOBjQAwgYkCgYEAym4YnzhRGC1a/oSWsVqI+Hcaj6+QAO4Q4d2Py2tTv9LPmUcu
F0VKY7wiuz45Z/sOI8+NvKzbVSoC4a2VbxNDrUg4VK598TyGfdLVvJHqshKb9ytF
c8vvV9XTNkOz3oWCyM/bjWhDNUOu8As/25YtHOAmxrH/UiLxVKAsytHDBscCAwEA
AaOB0zCB0DAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVy
YXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUlxhaP+hnI/slkBEm+qNToAK2OK8w
dgYDVR0jBG8wbYAUlxhaP+hnI/slkBEm+qNToAK2OK+hUqRQME4xCzAJBgNVBAYT
AlVTMQ4wDAYDVQQIEwVJZGFobzEOMAwGA1UEBxMFQm9pc2UxHzAdBgNVBAoTFklu
LVN5c3RlbSBEZXNpZ24sIEluYy6CAQAwDQYJKoZIhvcNAQEEBQADgYEAh9f9TA4A
iLAaz3q4yOIRa8YhPfGLKvqR3Y38M1CvaKxfD03XnTGzY9VXU4GFLJqEfskwH4uR
M5hYfLa4LiW3YlYVBETBuM8zPvvmEs58usX1/geWFLxUAAjP+mOWOfeo10pYf4Jd
9iIOtI1gixKirMR/1CeZ/pKeh9uk4KIgREQ=
-----END CERTIFICATE-----



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to