Steve,

Thanks for reply.

Unfortunately, I'm not the issuer of the certificate, only the consumer... and a consumer without many experience!
So I can't send you the test certificate as you ask.

With your response I have some elements to send to the issuer.

I'll inform you if some interestings things happens.

Thanks a lot,

Sébastien

Dr. Stephen Henson a écrit :
On Mon, Jun 15, 2009, Sbastien PIAU wrote:

Hello,

I want to convert a private key from DER to PEM format with the following command :

/>openssl pkcs8 -inform DER -nocrypto -in my.key  -out my.key.pem/

Unfortunately, it seems that -nocrypto options doesn't exist in my openssl versions (OpenSSL 0.9.8e and OpenSSL 0.9.8h )


The argument is called -nocrypt not -nocrypto

So I've tried the following command :

/>openssl pkcs8 -inform DER -nocrypt -in my.key -out my.key.pem
Error decrypting key
3408:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.\crypto\asn1\tasn_dec.c:1294: 3408:error:0D06C03A:asn1 encoding routines:ASN1_D2I_EX_PRIMITIVE:nested asn1 error:.\crypto\asn1\tasn_dec.c:830: 3408:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error:.\crypto\asn1\tasn_dec.c:749:Field=version, Type=PKCS8_PRIV_KEY_INFO/

Ok... tried the following too :

/>openssl pkcs8 -inform DER -nocrypt -in my.key -out my.key.pem -topk8
unable to load key/

Does anyone can help me?


Looks like the private key is in the wrong format. I've no idea what format it
is in but if you can post a *test* key (NOT AN IMPOTANT ONE) in the same
format I'll look at it.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to