On 06/19/2003, Todd A. Oberly wrote: > I wanted to try processing a binary PKCS12 file (ie. > split apart the 3 certificates inside) as downloaded from Thawte's > FreeMail service, but keep getting the same errors no matter what I try. > For example [...]
FYI, I finally figured it out myself. Well, sort of. I was having trouble because the certificate sequence isn't a PKCS12 (no private key ;-) or a PKCS7, but a "Netscape Certificate Sequence". Unfortunately, OpenSSL's NSEQ tools are still primitive, and processing it with ./openssl nseq -in ~/deliver.exe still generates an error. :-( So I'm off to report a bug and perhaps write a little tool of my own. (I'd offer a fix, but I'm not that good with C...) Cheers, Todd -- Todd Oberly "My joke has a beautiful voice..." [EMAIL PROTECTED] Poor Rich Ones, Special Angle ICQ: 34926408 ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
