| Lev Walkin | cfcf553 | 2004-09-26 13:13:31 +0000 | [diff] [blame] | 1 | |
| Lev Walkin | 9215729 | 2005-02-28 15:53:32 +0000 | [diff] [blame] | 2 | GENERAL INFORMATION |
| 3 | =================== |
| 4 | |
| Lev Walkin | cfcf553 | 2004-09-26 13:13:31 +0000 | [diff] [blame] | 5 | The X.509 (PKIX1) certificate decoder. Invoking `make` will compile the ASN.1 |
| Lev Walkin | 1e31883 | 2005-02-28 15:37:08 +0000 | [diff] [blame] | 6 | specifications from the rfc3280.txt in the above directory. |
| 7 | |
| Lev Walkin | 9215729 | 2005-02-28 15:53:32 +0000 | [diff] [blame] | 8 | x509dump USAGE |
| 9 | ============== |
| 10 | |
| Lev Walkin | 0f2c272 | 2006-09-16 03:42:13 +0000 | [diff] [blame] | 11 | To use the x509dump, you'll have to prepare an X.509 certificate |
| 12 | in DER encoding. The typical X.509 certificate will have a PEM format |
| 13 | (DER encoded data wrapped in base64, wrapped in PEM "BEGIN" and "END" sections). |
| 14 | The openssl x509 utility may be used to convert between PEM and DER. |
| Lev Walkin | 9215729 | 2005-02-28 15:53:32 +0000 | [diff] [blame] | 15 | |
| 16 | EXAMPLE: Convert 'certificate.pem' into 'certificate.der': |
| 17 | |
| 18 | openssl x509 -inform PEM -in certificate.pem \ |
| 19 | -outform DER -out certificate.der |
| 20 | |
| 21 | After convertsion, the x509dump utility may be used to dump the contents |
| 22 | of the DER-encoded X.509 certificate: |
| 23 | |
| Lev Walkin | 5e2f23e | 2006-08-25 01:51:29 +0000 | [diff] [blame] | 24 | ./x509dump certificate.der # Print as XML (BASIC-XER) |
| Lev Walkin | 9215729 | 2005-02-28 15:53:32 +0000 | [diff] [blame] | 25 | |
| 26 | The full list of recognized command line options may be obtained with |
| 27 | |
| 28 | > ./x509dump -h |
| Lev Walkin | 9215729 | 2005-02-28 15:53:32 +0000 | [diff] [blame] | 29 | |