On Sat, Mar 27, 2004, Ohaya wrote: > Hi, > > BTW, I just tried asn1parse, and that worked, and didn't indicate any > problems, so I'm confused as to why I'm getting those errors with x509: > > openssl asn1parse -in myca.cer -inform der >
asn1parse just checks for valid ASN1 it doesn't check for a valid certificate. If the file isn't a valid certificate then the x509 will typically see something it doesn't expect and produce an error. That 'wrong tag' error is indeed an indication of this. If as you said it looks like several certificates run together it could be a PKCS#7 file. Try: openssl pkcs7 -inform DER -in whatever.cer -print_certs failing that post what the first few lines of asn1parse produce. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
