Hi, BTW, I just tried asn1parse, and that worked, and didn't indicate any problems, so I'm confused as to why I'm getting those errors with x509:
openssl asn1parse -in myca.cer -inform der Jim Ohaya wrote: > > Hi, > > I'm trying to work with getting a CA cert installed. > > I downloaded it using IE, and ended up with a .CER file, but in Windows, > when I click on the .CER file, I get an error box "Invalid Public Key > Security Object File"/"This is an invalid Security Certificate". > > I tried to display the contents of the .CER file using openssl, but got > a "NO START LINE" error, so I dumped the raw file, and it appears to be > DER (actually, it looks like several certificates appended to each > other)? So I tried to use openssl X509 to convert it to PEM using > something like: > > openssl X509 -in myca.cer -inform DER -out myca.pem -outform PEM > > but I'm getting errors: > > E:\OpenSSL>openssl x509 -in myca.cer -inform DER -out myca.pem -outform > PEM > unable to load certificate > 1472:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong > tag:.\crypto\as > n1\tasn_dec.c:946: > 1472:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 > error:.\ > crypto\asn1\tasn_dec.c:304:Type=X509_CINF > 1472:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_D2I:nested asn1 > error:. > \crypto\asn1\tasn_dec.c:566:Field=cert_info, Type=X509 > > I'm running openssl 0.9.7d from: > > http://www.slproweb.com/products/Win32OpenSSL.html > > Can anyone tell me what's wrong? > > I was hoping that I could use openssl to try to diagnose things. > > Thanks, > Jim > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
