On Mon, Dec 19, 2005, Martijn Moret wrote: > Hi, > > I've created a certificate request with openssl and received the > certificate from verisign. > I need to use this certificate with IIS on windows server 2003 but can't > seem to convert the certificate. > > Here the message: > openssl x509 -in cert.crt -outform DER -out cert.der > unable to load certificate > 7312:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong > tag:tasn_dec.c:946: > 7312:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 > error:tasn_dec.c:304:Type=X509_CINF > 7312:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_D2I:nested asn1 > error:tasn_dec.c:566:Field=cert_info, Type=X509 > 7312:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_oth.c:82: >
It may be a PKCS#7 structure containing more than oen certificate. Try: openssl pkcs7 -in cert.der -print_certs then you need to manually work out which one you need from the output. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
