EldoS | Feel safer!

Software components for data protection, secure storage and transfer

self sign certificate: Eldos & OpenSSL

Also by EldoS: CallbackProcess
A component to control process creation and termination in Windows and .NET applications.
#1294
Posted: 09/29/2006 07:53:23
by Ronald Schneider (Basic support level)
Joined: 09/29/2006
Posts: 1

Hi,

I'm trying to test a self sign certificate.
So I used Eldos "CertReqDemo.exe" and the
SecureBlackbox "CertReqDemo" from the PKI-Samples.
I get the following output:


-----BEGIN NEW CERTIFICATE REQUEST-----
MIIBaTCB9AIBADBvMQswCQYDVQQGEwJERTEOMAwGA1UECBMFU3RhdGUxDjAMBgNV
BAcTBUxvY2FsMQwwCgYDVQQKEwNPcmcxDTALBgNVBAsTBFVuaXQxDTALBgNVBAMT
BE5hbWUxFDASBgkqhkiG9w0BCQEWBUVNYWlsMHwwDQYJKoZIhvcNAQEBBQADawAw
aAJhAKCLMbg6iIObT+t+5+FqVcT2tM5xNRvVGRingAXqCgiL4TP2oqkViGhgXOSJ
S+aVlpkxRnA+HO+mlvlceBV+DuI0JKD/3Y5lnI0BRNrcqDJXuUMbvP4RZ/Bzhih+
YnCn6QIDAQABoAAwDQYJKoZIhvcNAQEFBQADYQAuOHgjVjug1ljow53d5K5BfmZe
ZNSeV80D5AZZRnqsswYeIoBRj9SQe1tqRXJR0fzklDQrUyINhEmKkflebUYoddwG
7CVKRDariK7/AD5FoPXDKb99kYZaAivRmw6mio0=
-----END NEW CERTIFICATE REQUEST-----

When I try to open this request with OpenSSL I get an Error:

openssl req -in <CERTIFICATE REQUEST> -noout -text


------


But - if I generate it with openSSL:

openssl req -x509 -config config.cfg -newkey rsa:768 -days 365 -keyout req.pem -out ron_cert.txt -set_serial 0


-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


and test it:

openssl x509 -in ron_cert.txt -noout -text

then every thing works fine.


What's wrong? What are the differences?
Many thanks.


Ronald Schneider
#1296
Posted: 09/29/2006 08:14:36
by Eugene Mayevski (EldoS Corp.)

You are comparing apples to oranges, i.e. request to certificate.


Sincerely yours
Eugene Mayevski
#1310
Posted: 09/30/2006 05:27:45
by Ken Ivanov (EldoS Corp.)

Please use CertDemo application to generate a certificate. CertReqDemo generates certificate requests, i.e. you need some other application to generate a corresponding X.509 certificate based on the request.

Reply

Statistics

Topic viewed 3943 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!