Rainer Menzner wrote:

> 2) Create a binary encoded DER file as a public certificate:
> 
>     openssl.exe pkcs7 -inform PEM -outform DER -in pca-cert.pem -out
> test1.cer -text

Well, what do you need? If you just want a DER file
for a single certificate, just use:

openssl x509 -in pca-cert.pem -outform DER -out pca-cert.cer

Pkcs7 is more a utility to view PKCS7 files (which
can contain more than one certificate). To build
pkcs7-files you have to use the openssl utility
crl2pkcs7. This one is a little bit funny: use it
like this (untested):

openssl crl2pkcs7 -certfile file1.pem -certfile file2.pem -out certs.pkcs7 
-nocrl

Crazy thing to use "crl2pkcs7" with argument -nocrl ... :-)

Olaf

-- 
Dipl.Inform. Olaf Gellert                  PRESECURE (R)
Senior Researcher,                       Consulting GmbH
Phone: (+49) 0700 / PRESECURE           [EMAIL PROTECTED]

                        A daily view on Internet Attacks
                        https://www.ecsirt.net/sensornet

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to