Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[openssl.org #2007] unable to load certificate 5568:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.\crypto\asn1\tasn_dec.c:1316:

531 views
Skip to first unread message

Konrads Smelkovs via RT

unread,
Aug 12, 2009, 3:55:51 AM8/12/09
to
This is a multi-part message in MIME format...

------------=_1250060540-18647-1
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

I have tried this on Windows XP with 8.9.k and on Linux/Ubuntu with
-SNAPSHOT two days ago.
D:\Documents and Settings\ksmelkovs>"C:\Program
Files\OpenSSL\bin\openssl.exe" x509 -inform der -in Desktop\1.cer -text
unable to load certificate
5568:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.
\crypto\asn1\tasn_dec.c:1316:
5568:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
error:.\crypto\asn1\tasn_dec.c:380:Type=X509

The certificate is available at
http://drop.io/hidden/kgscenvqkwnwze/asset/MS1jZXI=
Windows XP built in functionality allows me to examine and import this
certificate.
--
Konrads Smelkovs
Applied IT sorcery.


------------=_1250060540-18647-1
Content-Type: text/html; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
RT-Attachment: 2007/23459/10963

I have tried this on Windows XP with 8.9.k and on Linux/Ubuntu with -SNAPSHOT two days ago.<br>D:\Documents and Settings\ksmelkovs&gt;&quot;C:\Program Files\OpenSSL\bin\openssl.exe&quot; x509 -inform der -in Desktop\1.cer -text <br>
unable to load certificate <br> 5568:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:. \crypto\asn1\tasn_dec.c:1316: <br> 5568:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:.\crypto\asn1\tasn_dec.c:380:Type=X509 <br>
<p>The certificate is available at <a target="_blank" rel="nofollow" href="http://drop.io/hidden/kgscenvqkwnwze/asset/MS1jZXI=">http://drop.io/hidden/kgscenvqkwnwze/asset/MS1jZXI=</a> <br> </p>Windows XP built in functionality allows me to examine and import this certificate.<br clear="all">
--<br>Konrads Smelkovs<br>Applied IT sorcery.<br>

------------=_1250060540-18647-1--
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List opens...@openssl.org
Automated List Manager majo...@openssl.org

Stephen Henson via RT

unread,
Aug 12, 2009, 8:40:30 AM8/12/09
to
> [kon...@smelkovs.com - Wed Aug 12 09:02:19 2009]:

>
> I have tried this on Windows XP with 8.9.k and on Linux/Ubuntu with
> -SNAPSHOT two days ago.
> D:\Documents and Settings\ksmelkovs>"C:\Program
> Files\OpenSSL\bin\openssl.exe" x509 -inform der -in Desktop\1.cer -text
> unable to load certificate
> 5568:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.
> \crypto\asn1\tasn_dec.c:1316:
> 5568:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
> error:.\crypto\asn1\tasn_dec.c:380:Type=X509
>
> The certificate is available at
> http://drop.io/hidden/kgscenvqkwnwze/asset/MS1jZXI=
> Windows XP built in functionality allows me to examine and import this
> certificate.
>

The certificate is not in the correct format for OpenSSL. If you look at
it is is base64 encoded all on one line. You can convert to DER with:

openssl base64 -d -A -in 1.cer -out 1.der

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

Konrads Smelkovs via RT

unread,
Aug 12, 2009, 9:18:37 AM8/12/09
to
This is a multi-part message in MIME format...

------------=_1250079854-66444-1


Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Thank You,

it works. I can only suggest adding this to FAQ.


--
Konrads Smelkovs
Applied IT sorcery.


On Wed, Aug 12, 2009 at 2:46 PM, Stephen Henson via RT <r...@openssl.org>wrote:

> > [kon...@smelkovs.com - Wed Aug 12 09:02:19 2009]:
> >
> > I have tried this on Windows XP with 8.9.k and on Linux/Ubuntu with
> > -SNAPSHOT two days ago.
> > D:\Documents and Settings\ksmelkovs>"C:\Program
> > Files\OpenSSL\bin\openssl.exe" x509 -inform der -in Desktop\1.cer -text
> > unable to load certificate
> > 5568:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.
> > \crypto\asn1\tasn_dec.c:1316:
> > 5568:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
> > error:.\crypto\asn1\tasn_dec.c:380:Type=X509
> >
> > The certificate is available at
> > http://drop.io/hidden/kgscenvqkwnwze/asset/MS1jZXI=
> > Windows XP built in functionality allows me to examine and import this
> > certificate.
> >
>
> The certificate is not in the correct format for OpenSSL. If you look at
> it is is base64 encoded all on one line. You can convert to DER with:
>
> openssl base64 -d -A -in 1.cer -out 1.der
>
> Steve.
> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org
>
>


------------=_1250079854-66444-1


Content-Type: text/html; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

RT-Attachment: 2007/23495/10986

Thank You,<br><br>it works. I can only suggest adding this to FAQ.<br clear="all">--<br>Konrads Smelkovs<br>Applied IT sorcery.<br>
<br><br><div class="gmail_quote">On Wed, Aug 12, 2009 at 2:46 PM, Stephen Henson via RT <span dir="ltr">&lt;<a href="mailto:r...@openssl.org">r...@openssl.org</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
&gt; [<a href="mailto:kon...@smelkovs.com">kon...@smelkovs.com</a> - Wed Aug 12 09:02:19 2009]:<br>
<div><div></div><div class="h5">&gt;<br>
&gt; I have tried this on Windows XP with 8.9.k and on Linux/Ubuntu with<br>
&gt; -SNAPSHOT two days ago.<br>
&gt; D:\Documents and Settings\ksmelkovs&gt;&quot;C:\Program<br>
&gt; Files\OpenSSL\bin\openssl.exe&quot; x509 -inform der -in Desktop\1.cer -text<br>
&gt; unable to load certificate<br>
&gt; 5568:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.<br>
&gt; \crypto\asn1\tasn_dec.c:1316:<br>
&gt; 5568:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1<br>
&gt; error:.\crypto\asn1\tasn_dec.c:380:Type=X509<br>
&gt;<br>
&gt; The certificate is available at<br>
&gt; <a href="http://drop.io/hidden/kgscenvqkwnwze/asset/MS1jZXI=" target="_blank">http://drop.io/hidden/kgscenvqkwnwze/asset/MS1jZXI=</a><br>
&gt; Windows XP built in functionality allows me to examine and import this<br>
&gt; certificate.<br>
&gt;<br>
<br>
</div></div>The certificate is not in the correct format for OpenSSL. If you look at<br>
it is is base64 encoded all on one line. You can convert to DER with:<br>
<br>
openssl base64 -d -A -in 1.cer -out 1.der<br>
<br>
Steve.<br>
<font color="#888888">--<br>
Dr Stephen N. Henson. OpenSSL project core developer.<br>
Commercial tech support now available see: <a href="http://www.openssl.org" target="_blank">http://www.openssl.org</a><br>
<br>
</font></blockquote></div><br>

------------=_1250079854-66444-1--

0 new messages