Discussion:
OpenSSL unable to load certificate error
(too old to reply)
Wang-Martin, Linda
2011-07-21 21:33:09 UTC
Permalink
Hi,
I recently got the latest version of OpenSSL (1.0.0) however I now have a problem with one of my certificates that I didn't use to have in an older version. Specifically, whenever I try to do anything with this particular certificate I run into an:
1472:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.\crypto\asn1\tasn_dec.c:1319:
1472:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:.\crypto\asn1\tasn_dec.c:381:Type=X509

Googling this, I noticed that there was a similar problem, where apparently the certificate was not in the correct format, and was fixed with this command:
openssl base64 -d -A -in 1.cer -out 1.der .

I've tried this command on my certificate and my output was completely blank.

What I'm really trying to do right now is to get the public key in .der format from my certificate. However it seems that I am stumped at the first step. Any suggestions would be greatly appreciated.

Thanks,
Linda
Dr. Stephen Henson
2011-07-22 11:33:23 UTC
Permalink
Post by Wang-Martin, Linda
Hi,
1472:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:.\crypto\asn1\tasn_dec.c:381:Type=X509
openssl base64 -d -A -in 1.cer -out 1.der .
I've tried this command on my certificate and my output was completely blank.
What I'm really trying to do right now is to get the public key in .der format from my certificate. However it seems that I am stumped at the first step. Any suggestions would be greatly appreciated.
Why don't you post the certificate causing the problem?

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-***@openssl.org
Automated List Manager ***@openssl.org
Loading...