2004-09-26 13:13:31 +00:00
|
|
|
|
2005-02-28 15:53:32 +00:00
|
|
|
GENERAL INFORMATION
|
|
|
|
|
===================
|
|
|
|
|
|
2004-09-26 13:13:31 +00:00
|
|
|
The X.509 (PKIX1) certificate decoder. Invoking `make` will compile the ASN.1
|
2005-02-28 15:37:08 +00:00
|
|
|
specifications from the rfc3280.txt in the above directory.
|
|
|
|
|
|
2005-02-28 15:53:32 +00:00
|
|
|
x509dump USAGE
|
|
|
|
|
==============
|
|
|
|
|
|
2006-09-16 03:42:13 +00:00
|
|
|
To use the x509dump, you'll have to prepare an X.509 certificate
|
|
|
|
|
in DER encoding. The typical X.509 certificate will have a PEM format
|
|
|
|
|
(DER encoded data wrapped in base64, wrapped in PEM "BEGIN" and "END" sections).
|
|
|
|
|
The openssl x509 utility may be used to convert between PEM and DER.
|
2005-02-28 15:53:32 +00:00
|
|
|
|
|
|
|
|
EXAMPLE: Convert 'certificate.pem' into 'certificate.der':
|
|
|
|
|
|
|
|
|
|
openssl x509 -inform PEM -in certificate.pem \
|
|
|
|
|
-outform DER -out certificate.der
|
|
|
|
|
|
|
|
|
|
After convertsion, the x509dump utility may be used to dump the contents
|
|
|
|
|
of the DER-encoded X.509 certificate:
|
|
|
|
|
|
2006-08-25 01:51:29 +00:00
|
|
|
./x509dump certificate.der # Print as XML (BASIC-XER)
|
2005-02-28 15:53:32 +00:00
|
|
|
|
|
|
|
|
The full list of recognized command line options may be obtained with
|
|
|
|
|
|
|
|
|
|
> ./x509dump -h
|
|
|
|
|
|
