Discussion:
openssl error (unable to load certificate)
Wolfgang Ziegler
22 years ago
Permalink
Hi,

when trying to get the subject out of a certificate from our local
test CA I get the following error:

openssl x509 -noout -in usercert.pem -subject
unable to load certificate
26416:error:0D081072:asn1 encoding routines:d2i_ASN1_OBJECT:expecting an object:a_object.c:217:
26416:error:0D084070:asn1 encoding routines:d2i_ASN1_SET:error parsing set element:a_set.c:198:address=134815299 offset=-134815267
26416:error:0D11D004:asn1 encoding routines:d2i_X509_CERT_AUX:nested asn1 error:x_x509a.c:82:address=134815295 offset=4
26416:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_lib.c:290:

Doing a verification of the certificate results in:

openssl verify -CApath /etc/grid-security/certificates usercert.pem
usercert.pem: OK

The openssl version is: OpenSSL 0.9.6g 9 Aug 2002

Does anybody see what is going wrong?

Thanks,

Wolfgang


--
Fraunhofer-Institute for Algorithms and Scientific Computing (SCAI)
Schloss Birlinghoven, D-53754 Sankt Augustin, Germany
Tel: +49 2241 14 2258 Fax: +49 2241 14 2889 http://www.scai.fraunhofer.de
"Heut ist nicht so kalt wie gestern, trotzdem dass heut kaelter ist"
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users-MCmKBN63+***@public.gmane.org
Automated List Manager majordomo-MCmKBN63+***@public.gmane.org
Richard Levitte - VMS Whacker
22 years ago
Permalink
In message <5.1.0.14.2.20021206194656.05e6fc30-***@public.gmane.org> on Fri, 06 Dec 2002 19:51:04 +0100, Wolfgang Ziegler <***@scai.fraunhofer.de> said:

Wolfgang.Ziegler> when trying to get the subject out of a certificate
Wolfgang.Ziegler> from our local test CA I get the following error:
Wolfgang.Ziegler>
Wolfgang.Ziegler> openssl x509 -noout -in usercert.pem -subject
Wolfgang.Ziegler> unable to load certificate
Wolfgang.Ziegler> 26416:error:0D081072:asn1 encoding routines:d2i_ASN1_OBJECT:expecting an object:a_object.c:217:
Wolfgang.Ziegler> 26416:error:0D084070:asn1 encoding routines:d2i_ASN1_SET:error parsing set element:a_set.c:198:address=134815299 offset=-134815267
Wolfgang.Ziegler> 26416:error:0D11D004:asn1 encoding routines:d2i_X509_CERT_AUX:nested asn1 error:x_x509a.c:82:address=134815295 offset=4
Wolfgang.Ziegler> 26416:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_lib.c:290:

Hmm, I've seen something similar. If you do the following, what do
you get?

openssl asn1parse -i -in usercert.pem
--
Richard Levitte \ Spannvägen 38, II \ LeViMS-***@public.gmane.org
***@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47
\ SWEDEN \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis -- poei-***@public.gmane.org
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users-MCmKBN63+***@public.gmane.org
Automated List Manager majordomo-MCmKBN63+***@public.gmane.org
Wolfgang Ziegler
22 years ago
Permalink
...
nothing, there is no output at all
Post by Richard Levitte - VMS Whacker
--
\ SWEDEN \ or +46-708-26 53 44
Member of the OpenSSL development team: http://www.openssl.org/
Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
--
Fraunhofer-Institute for Algorithms and Scientific Computing (SCAI)
Schloss Birlinghoven, D-53754 Sankt Augustin, Germany
Tel: +49 2241 14 2258 Fax: +49 2241 14 2889 http://www.scai.fraunhofer.de
"Heut ist nicht so kalt wie gestern, trotzdem dass heut kaelter ist"
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users-MCmKBN63+***@public.gmane.org
Automated List Manager majordomo-MCmKBN63+***@public.gmane.org
Loading...