[stunnel-users] stunnel not seeing ca bundle files

Wed Mar 12 20:40:15 CET 2008

On Wed, 2008-03-12 09:05:17 -0700, sf.techguy at gmail.com wrote:
> [..]
> 
> Tried the command above on the 1st of 5 crt files (openssl pkcs12 -in
> filename.crt -out filename.pem), and am getting this error:
> 
> 19319:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong
> tag:tasn_dec.c:1007:
> 19319:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
> error:tasn_dec.c:305:Type=PKCS12
> 
> Any ideas why that might be happening?

It seems your files do not contain a PKCS#12 structure (containing the
key and the whole certificate chain). I should have recognize this by
the fact you have one file for each certificate. Sorry.

Maybe you should give the x509 openssl command a try:

  openssl x509 -in filename.crt -inform DES -out filename.pem

HTH,

Ludolf

-- 

---------------------------------------------------------------
Ludolf Holzheid             Tel:    +49 621 339960
Bihl+Wiedemann GmbH         Fax:    +49 621 3392239
Floßwörthstraße 41          e-mail: lholzheid at bihl-wiedemann.de
D-68199 Mannheim, Germany
---------------------------------------------------------------