Apache SSL使用openssl将itermediateCA.cer转换为crt

Question

Try to convert IntermidiateCA.cer to crt formmat for Apache but I couldn't. I use the following command below:

openssl x509 -inform DER -in IntermediateCA.cer -out IntermediateCA.crt

This the error I got below

unable to load certificate
4276141236:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong 
tag:tasn_dec.c:1198:
 4276141236:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested 
asn1 error:tasn_dec.c:372:Type=X509

Kindly note the server is solaris 5.10

Answer 1

There are two common certificate encoding types. If you can read the "----BEGIN CERTIFICATE----" then it's PEM encoded. If not, DER (binary) encoded. Trying to convert with the openssl x509 command specifying the wrong encoding will produce the error you got.

If certificate file is DER encoded (binary)

openssl x509 -inform DER -in certificate.cer -out certificate.crt

If certificate is PEM encoded (human readable)

openssl x509 -inform PEM -in certificate.cer -out certificate.crt