[prev in list] [next in list] [prev in thread] [next in thread]
List: openssl-users
Subject: Re: PEM to DER changes SubjectAltName
From: Jean Gelinas <jgelinas33 () comcast ! net>
Date: 2014-05-26 2:17:57
Message-ID: 1189928932.23679.1401070677944.JavaMail.root () sz0037a ! westchester ! pa ! mail ! comcast ! net
[Download RAW message or body]
Thanks all! I believe I'm seeing a display format difference and, as Viktor \
mentioned, not a data format difference.
Jean Gelinas, Jr.
2 Paige Drive
Merrimack, NH 03054
(603) 370-7397
jgelinas33@comcast.net
----- Original Message -----
From: "Viktor Dukhovni" <openssl-users@dukhovni.org>
To: openssl-users@openssl.org
Sent: Sunday, May 25, 2014 9:56:58 PM
Subject: Re: PEM to DER changes SubjectAltName
On Mon, May 26, 2014 at 01:34:29AM +0000, Jean Gelinas wrote:
> I've created a PEM CA/Key using Win32 OpenSSL. Looks great. Went
> to convert the PEM formatted cert to DER and it seems to have
> changed the format of the Subject Alternative Name. I'd like to
> know if this is expected behavior.
You're mistaken. This is impossible. Conversion from PEM to DER
is just a matter of converting between base64 encoding of ASN.1
data and a raw binary form of the same ASN.1 data. There are no
conversion tools between PEM and DER that are capable of the
kind of change you describe. Don't confuse differences between
display formats with differences in the underlying data.
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org
[Attachment #3 (text/html)]
<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div \
style='font-family: Arial; font-size: 12pt; color: #000000'>Thanks all! I \
believe I'm seeing a display format difference and, as Viktor mentioned, not a data \
format difference.<br><br><div><span name="x"></span>Jean Gelinas, Jr.<br>2 Paige \
Drive<br>Merrimack, NH 03054<br>(603) 370-7397<br>jgelinas33@comcast.net<span \
name="x"></span><br></div><br><hr id="zwchr"><b>From: </b>"Viktor Dukhovni" \
<openssl-users@dukhovni.org><br><b>To: \
</b>openssl-users@openssl.org<br><b>Sent: </b>Sunday, May 25, 2014 9:56:58 \
PM<br><b>Subject: </b>Re: PEM to DER changes SubjectAltName<br><br>On Mon, May 26, \
2014 at 01:34:29AM +0000, Jean Gelinas wrote:<br><br>> I've created a PEM CA/Key \
using Win32 OpenSSL. Looks great. Went<br>> to convert the PEM formatted cert to \
DER and it seems to have<br>> changed the format of the Subject Alternative Name. \
I'd like to<br>> know if this is expected behavior.<br><br>You're mistaken. \
This is impossible. Conversion from PEM to DER<br>is just a matter of \
converting between base64 encoding of ASN.1<br>data and a raw binary form of the same \
ASN.1 data. There are no<br>conversion tools between PEM and DER that are \
capable of the<br>kind of change you describe. Don't confuse differences \
between<br>display formats with differences in the underlying data.<br><br>-- \
<br> Viktor.<br>______________________________________________________________________<br>OpenSSL \
Project \
http://www.openssl.org<br>User Support Mailing \
List \
openssl-users@openssl.org<br>Automated List Manager \
\
majordomo@openssl.org<br></div></body></html>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic