Hello,
> A follow-up question just for double check. The my_cert.pem file
> consists of two parts: [RSA private key] and [certificate (public
> key)]. Is this the correct sequence? I saw a certificate file that
> contains three parts: [certificate (?)], [RSA private key],
> [certificate (public key
Thanks, much.
- Dennis
Wolfgang Riedel wrote:
Hi Dennis,
you want (maybe)
-BEGIN CERTIFICATE-
MIICPDCCAaUCEHC65B0Q2Sk0tjjKewPMur8wDQYJKoZIhvcNAQECBQAwXzELMAkG
A1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFz
cyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4X
Hi Dennis,
you want (maybe)
-BEGIN CERTIFICATE-
MIICPDCCAaUCEHC65B0Q2Sk0tjjKewPMur8wDQYJKoZIhvcNAQECBQAwXzELMAkG
A1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFz
cyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTk2
MDEyOTAwMDAwMFoXDTI4MDgwMTIzNTk1OVowXzELMAkGA
>Hello,
>> We have a web server running on Apache/Tomcat platform (Sun Solaris 10)
>> with a VeriSign certificate. I'm trying to use the same certificate with
>> openssl 0.9.8f for my stand-alone web services application (listening on
>> separate ports, of course). So I followed the procedure a
Thanks for the quick response.
The missing piece was Root CA certificate. I downloaded (1) VeriSign's
intermediate CA cert from VeriSign web site and (2) VeriSign's Root CA
from IE browser, and put them into one CA cert file. As you described,
the subject-issuer chain is now complete. Verifica
Hello,
> We have a web server running on Apache/Tomcat platform (Sun Solaris 10)
> with a VeriSign certificate. I'm trying to use the same certificate with
> openssl 0.9.8f for my stand-alone web services application (listening on
> separate ports, of course). So I followed the procedure as in
Hi All,
We have a web server running on Apache/Tomcat platform (Sun Solaris 10)
with a VeriSign certificate. I'm trying to use the same certificate with
openssl 0.9.8f for my stand-alone web services application (listening on
separate ports, of course). So I followed the procedure as in
http:
I'm trying to read an x509 certificate which was issued by a private
Verisign OnSite CA.
The Sun JDK 1.2 keytool is able to read it, but OpenSSL, run with the command
openssl x509 -text -in
gives the error message:
unable to load certificate
29041:error:0D0A2007:asn1 encoding rout
