Hi there;

On June 3, 2008 11:37:19 am staggerwing wrote:
> Hello,
>
> I have installed OpenSSL on Windows and I want to create a CRT certificate
> for client authentication purposes.  I want specific clients to
> authenticate against a Windows 2003 web server.
>
> Windows 2003 CA does not allow me to create a CRT certificate but only CER.
> The customer is using an in house java application and requires CRT.
>
Ah - what you want is PEM? and not the DER encoding that Microsoft provides? 
(PEM is Base64 encoded certificate, DER is a binary format).

If the client wants a "crt" that is actually a DER encoded , just change the 
extension and give it to them (CER is pretty much just a DER encoded cert).

If the client wants a "crt" that is actually a PEM encoded cert:

openssl x509 -in cert.cer -inform DER -out cert.crt -outform PEM

will do what you want.


> Any help, hind, link or anything else is greatly appreciated as I am at an
> dead end :(
>
Have fun.

-- 
Patrick Patterson
President and Chief PKI Architect,
Carillon Information Security Inc.
http://www.carillon.ca
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to