Verifying and Converting Certificates

This appendix describes how to verify that certificates are in PEM format and describes how to convert them from DER to PEM format if necessary.

➢

To verify and convert certificates:

1.

Login to the OVOC server as user root.

2.

Transfer the generated certificate to the OVOC server.

3.

Execute the following command on the same directory that you transfer the certificate to verify that the certificate file is in PEM format:

Openssl x509 -in certfilename.crt -text -noout

4.

Do one of the following:

a.

If the certificate is displayed in text format, then this implies that the file is in PEM format, and therefore you can skip the steps below.

b.

If you receive an error similar to the one displayed below, this implies that you are trying to view a DER encoded certificate and therefore need to convert it to the PEM format.

unable to load certificate
12626:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE

5.

Convert the DER certificate to PEM format:

openssl x509 -inform der -in certfilename.crt -out certfilename.crt