Duncan Taylor wrote: > > My first question: > HOW do I parse out a recipient's .pfx cert or .p12 cert to pem > format????? I have scoured the documentation High and Low and find > NOTHING but examples of "since I have MY .pem we'll use that for the > signer and reciep.." or how to parse one's pkcs12 file to pem using the > password. If I get someone else's pkcs12 file how do I parse it w/o the > password? What is the commandline please? > Then I suggest you look a bit harder. This is described in detail in the pkcs12 manual page. The PKCS12 API is described in the openssl.txt file and there are some examples using the API too. You can't read a PKCS12 file without the password because the password is used to encrypt the data. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Celo Communications: http://www.celocom.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]