convert xml cert to cer or pfx format

[Chris Kordish]

Hi,

 

I need  to convert an XML certificate meant for a Windows system ( which I unpacked from a CAB file) into something I can use on a Linux-like SmartPhone like *.cer or *.pfx format.  Is there anyway to use openssl (or any other tool) to convert from one format to the other ?   

thanks
--
Chris Kordish

[Cristian Thiago Moecke]

XML certificate? Are you sure that it is a certificate? Never heard about such thing.

OpenSSL works with x509v3 certificate. There is no such thing as .pfx or .cer certificate formats, they are x509 format certificates, that may be encoded on PEM or DER format. This certificates can be put into packages, like PKCS#7 or PKCS#12 (if im not wrong, pfx is PKCS#12), but then you have not a certificate anymore, you have a *package* that *contains* a certificate. 

Probably this XML is not *a* certificate, but *maybe* it *contains* a certificate. Or maybe you are not talking about x509 certificates. We will need more info, maybe you can provide the contents of the XML. 

Att,

Cristian 

2010/5/4 Chris Kordish <csko...@gmail.com>

[Mark H. Wood]

On Wed, May 05, 2010 at 06:48:23AM -0300, Cristian Thiago Moecke wrote:
> XML certificate? Are you sure that it is a certificate? Never heard about
> such thing.

That could refer to one or more of the Recommendations at:

http://www.w3.org/standards/xml/security

> Probably this XML is not *a* certificate, but *maybe* it *contains* a
> certificate.

That would seem to be consistent with my brief look at the above. For
example:

http://www.w3.org/TR/2005/REC-xkms2-20050628/#XKMS_2_0_Section_4_1_1

If the OP would tell us the namespace and type of the element
containing the certificate, that might help.

--
Mark H. Wood, Lead System Programmer mw...@IUPUI.Edu
Balance your desire for bells and whistles with the reality that only a
little more than 2 percent of world population has broadband.
-- Ledford and Tyler, _Google Analytics 2.0_

[Cristian Thiago Moecke]

Oh, nice to know it. 

But if is that he is talking about, then he can't convert this to x509 certificates. Not without re-signing it. He may generate a new x509 certificate to the same key pair, but without more details, it is hard to tell if this is an option.  

2010/5/5 Mark H. Wood <mw...@iupui.edu>