PKCS11-tool unable to write pem cetificates in softhsm about opensc HOT 5 CLOSED

On 9/12/2013 6:19 AM, sanaullah82 wrote:

I am trying to write pem certificates in softhsm using pkcs11-tool but it feels that, pem based certificate are not supported by pkcs11-tool. pkcs11-tool can only write a DER certificate.

OpenSSL is your friend...

openssl x509 -inform PEM -outform DER < cert.pem > cert.der

openssl pkcs12 -help

Openvpn implementation can only read pem/p12 certificates from any smart card or hsm. I need this to integrate with openvpn? please let me know if there is a way?

Certificates are always stored in DER (ASN.1) on the card. PEM is just a base 64 encoding of the DER.

Regards,
Sanaullah

—
Reply to this email directly or view it on GitHub #181.

Douglas E. Engert [email protected]
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444

from opensc.

thanks for the response.

OpenSSL is your friend...
openssl x509 -inform PEM -outform DER < cert.pem > cert.der

I have used the same above commands to write the certs in softhsm and its ok.
but when i try to list the certs using openvpn pkcs11 interface. its unable to list any certs.

I have tested some smart cards, they are working with openvpn. I wrote the pem encoded certificates on smart cards not DER encoded. on the basis of that, I am assuming openvpn which uses pkcs11-helper library to read the certs, may be unable to read Der encoded certificate.

from opensc.

OpenVPN seems to accept certificates on cards in binary format, see http://acksyn.org/docs/smart-cards-openvpn.html The link also shows how to configure OpenVPN...

@sanaullah82 has your problem been solved?

from opensc.

please reopen if not

from opensc.

That issue was fixed.

On Fri, Dec 12, 2014 at 2:54 AM, Frank Morgner [email protected]
wrote:

please reopen if not

—
Reply to this email directly or view it on GitHub
#181 (comment).

from opensc.