Issues with certificate import

View: New views
2 Messages — Rating Filter:   Alert me  

Issues with certificate import

by Scott Neugroschl-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Does anyone know of certificate import issues?

cryptlib version 3.2.2.0
cryptlib version 3.2.1.0

I've got some issues with certificate import, see below.

Here are the certs that make the cryptImportCert() call fail with
a status code of -32 (CRYPT_ERROR_BADDATA):

--------------------------------------------------------------------
1)  Created by zftpserver:

-----BEGIN CERTIFICATE-----
MIICjTCCAfagAwIBAgINMzQzMDEzNjkxMDU1NjANBgkqhkiG9w0BAQUFADB8MQsw
CQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEUMBIGA1UEBxMLU2ltaSBW
YWxsZXkxDjAMBgNVBAoTBVh5cHJvMRAwDgYDVQQLEwdTdXBwb3J0MSAwHgYDVQQD
Exd4eXByb25iNS54eXByby0yMy5sb2NhbDAeFw0wODA5MDkyMjQ4MzBaFw0wOTA5
MDkyMjQ4MzBaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRQw
EgYDVQQHEwtTaW1pIFZhbGxleTEOMAwGA1UEChMFWHlwcm8xEDAOBgNVBAsTB1N1
cHBvcnQxIDAeBgNVBAMTF3h5cHJvbmI1Lnh5cHJvLTIzLmxvY2FsMIGfMA0GCSqG
SIb3DQEBAQUAA4GNADCBiQKBgQDM7mOzmE+sPHjIZ3tB+rJi1y8nXAUzwD0I4R/R
1Qp3yB64pifjgVl7lmtaczQHposLGI0JPykxEsAX5fiMnmPUYD57hc34bIGeGDCI
9hAYNGZ0cswpeSnkCLx5lYAejStZ23P0juk3gqmB5dQOHt2BwX23NH5mAhYn4oHy
qA3vXwIDAQABoxMwETAPBgNVHQ8BAQAEBQMDAOAAMA0GCSqGSIb3DQEBBQUAA4GB
AEpzuD8H1TbEN5j5g2oA43s8JCohOYx9DrND/gxG+9Fu3OIrBVwoe1DPbzYZVS7t
gRvNL/2Dc4b6cEQrx+ONrBHheVMxszyYGVEMLQ7D2Qil3WBpZAFYYI5bj98AB82Z
5h7sS++6ZrUcgyP1sZqe7/NbrIZvarl5vU082k/Wdimq
-----END CERTIFICATE-----


2) Created by RACDCERT on an IBM mainframe:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


--------------------------------------------------------------------


----
Scott Neugroschl
XYPRO Technologies
scott_n@...
805-583-2874 x133


_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

Re: Issues with certificate import

by Peter Gutmann :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

"Scott Neugroschl" <scott_n@...> writes:

>Does anyone know of certificate import issues?
>
>cryptlib version 3.2.2.0
>cryptlib version 3.2.1.0
>
>I've got some issues with certificate import, see below.

The first one imports fine (with 3.3.2, are you really still using 3.2.1 or is
that a typo?), the second one has the extensions encoded wrong.  To import it,
lower the compliance level to CRYPT_COMPLIANCELEVEL_REDUCED.

Peter.


_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.