Rainer Menzner wrote: > 2) Create a binary encoded DER file as a public certificate: > > openssl.exe pkcs7 -inform PEM -outform DER -in pca-cert.pem -out > test1.cer -text
Well, what do you need? If you just want a DER file for a single certificate, just use: openssl x509 -in pca-cert.pem -outform DER -out pca-cert.cer Pkcs7 is more a utility to view PKCS7 files (which can contain more than one certificate). To build pkcs7-files you have to use the openssl utility crl2pkcs7. This one is a little bit funny: use it like this (untested): openssl crl2pkcs7 -certfile file1.pem -certfile file2.pem -out certs.pkcs7 -nocrl Crazy thing to use "crl2pkcs7" with argument -nocrl ... :-) Olaf -- Dipl.Inform. Olaf Gellert PRESECURE (R) Senior Researcher, Consulting GmbH Phone: (+49) 0700 / PRESECURE [EMAIL PROTECTED] A daily view on Internet Attacks https://www.ecsirt.net/sensornet ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]