outlaw wrote: > > My Windows CA database has 112 certs in it. > You can see those using either IE or the certmgr utility > <certmgr.exe -v -c -s root>. > > I'd like to get them all in a format SSL_CTX_load_verify_locations() will > successfully load. > > Using the certificate manager in IE you can export the certs one-by-one in a > "Base-64 encoded X.509 (.CER) format", which openssl accepts, but I don't > want to manually export 112 of them. Selecting >1 cert for exporting does > not allow you to choose the format to export it in, and it seems to be in a > PKCS7 format. > You should be able to convert it using: openssl pkcs7 -in file.p7 -inform DER -print_certs Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Celo Communications: http://www.celocom.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
