Fault in PKCS #12 conversion example in man ocserv(8)?
Nikos Mavrogiannopoulos
nmav at gnutls.org
Mon Feb 16 14:05:16 PST 2015
On Mon, 2015-02-16 at 21:50 +0100, Björn Ketelaars wrote:
> I attempted to build a simple PKI using the examples in ocserv(8). Last step in
> the generation of a client certificate is the conversion of a certificate in to
> PKCS #12. Unfortunately the resulting file is not compatible with openconnect
> (tested in OSX and OpenBSD):
[...]
> I suspect that openconnect does not like PKCS #12 in PEM format. It does
> however like DER format. Easy solution is to change the certtool example in
> ocserv(8) to include the --outder switch.
Thanks. I've updated the manpage to include that step.
regards,
Nikos
More information about the openconnect-devel
mailing list