[strongSwan] PKCS#10 file format with "ipsec pki -req"

Andreas Steffen andreas.steffen at strongswan.org
Thu Mar 11 18:35:09 CET 2010

Hi Mugur,

automated protocols like SCEP use DER format [embedded in PKCS#7]
and web-based CAs offer copy-and-paste functionality in PEM format.



> Hi Martin,
>> the only supported output format of a certificate request file is 
>> binary DER.
> For which reason one will choose "ipsec pki -req" on a strongSwan
> system instead openssl to generate certificate request files in DER
> format?
> More general question: Do you know which one of DER or PEM formats
> are most widely used by various PKI related tools for certificate
> request files?
> Regards Mugur

Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3430 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100311/ace9b7c6/attachment.bin>

More information about the Users mailing list