On Fri, Jun 20, 2003, Todd A. Oberly wrote: > On 06/19/2003, Todd A. Oberly wrote: > > > I wanted to try processing a binary PKCS12 file (ie. > > split apart the 3 certificates inside) as downloaded from Thawte's > > FreeMail service, but keep getting the same errors no matter what I try. > > For example > [...] > > FYI, I finally figured it out myself. Well, sort of. I was having > trouble because the certificate sequence isn't a PKCS12 (no private key > ;-) or a PKCS7, but a "Netscape Certificate Sequence". Unfortunately, > OpenSSL's NSEQ tools are still primitive, and processing it with > > ./openssl nseq -in ~/deliver.exe > > still generates an error. :-( So I'm off to report a bug and perhaps > write a little tool of my own. (I'd offer a fix, but I'm not that good > with C...) >
What does the file look like? Does it appear binary or base64 encoded with headers? If you can post or send me a copy I'll have a look at it. The last time I looked Thawte had several options for downloading certificates including PKCS#7, raw and nseq, you may have more luck with another form. Steve. -- Dr Stephen N. Henson. Core developer of the OpenSSL project: http://www.openssl.org/ Freelance consultant see: http://www.drh-consultancy.demon.co.uk/ Email: [EMAIL PROTECTED], PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
