[strongSwan] PKCS#10 file format with "ipsec pki -req"

Martin Willi martin at strongswan.org
Thu Mar 11 17:18:36 CET 2010

Hi Mugur,
> the only supported output format of a certificate request file is
> binary DER. 

This is correct.

> How can be created a certificate request file in a PEM format with
> strongSwan commands?

We currently do not support PEM encoding. You'll have to use other tools
for the conversion, such as openssl.

> Does this command accept both DER and PEM as private key RSA input
> file (--in) ?

Yes, strongSwan and the PKI tool can decode PEM files. The input file
format is detected automatically.


More information about the Users mailing list