Ori Yosefi wrote:
> 
> Hello all,
> 
> I've been unsuccesfully trying to read an IIS 5 backup file with the
> eventual purpose of converting it into PEM format.
> 
> When I try to read the file using "openssl pkcs12 -in <filename>
> -nokeys" everything works fine and I can get the certificate.
> 
> If I try to do "openssl pkcs12 -in <filename> -nocerts" openssl crashes.
> 
> I've tried doing it with both openssl 0.9.5a and 0.9.6 on NT and with
> openssl 0.9.5a on Solaris and both fail.
> 
> I think that the problem occurs when trying to parse the localKeyID
> attribute, although I can't be sure.
> 
> Another observation that I have made is that when I use IIS backup files
> (Microsoft claims that they are PKCS#12 but their extension is .pfx) I
> have this problem. When I get keys exported from W2K's Certificate
> Manager (which has the extension .p12) openssl works fine with both key
> and certs.
> 

Do you have a sample file (nothing imporant!!) in this form I can use to
diagnose the problem? If so please send it to me and I'll see if I can
trace the cause.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to