Skip to content

Publishing

PEM to DER certificate

openssl x509 \
    -in ca/root-ca01/root-ca01.crt \
    -out ca/root-ca01/root-ca01.cer \
    -outform der

PEM to DER crl

openssl crl \
    -in crl/identity-ca01.crl \
    -out crl/identity-ca01.crl \
    -outform der

Check the crl in DER format

openssl crl -in crl/identity-ca01.crl -inform der -text

Create a PKCS#7 bundle

openssl crl2pkcs7 -nocrl \
    -certfile ca/identity-ca01/identity-ca01-chain.pem \
    -out ca/identity-ca01/identity-ca01-chain.p7c \
    -outform der

Check the PKCS#7 file

openssl pkcs7 -in ca/identity-ca01/identity-ca01-chain.p7c -print_certs -inform der