Received: from mail-ej1-f44.google.com (mail-ej1-f44.google.com [209.85.218.44])
	by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 691DF782B8C
	for <~alpine/users@lists.alpinelinux.org>; Sun, 21 Feb 2021 16:43:20 +0000 (UTC)
Received: by mail-ej1-f44.google.com with SMTP id k13so23529977ejs.10
        for <~alpine/users@lists.alpinelinux.org>; Sun, 21 Feb 2021 08:43:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:from:date:message-id:subject:to;
        bh=ujkbZE0NUelRwV31uFvRizdYDVtNsFeF22RaQlQq5yI=;
        b=mrbtXKvPsFm547Sn/gKquCwZXyBTIwBALm+Q7UsKrQFpKMVcK/onk/2zGt6133VEVo
         kKCd/To64HASnndZOAPlay1qdssI+P5Lcs2Oj7ularKBMkgs6/5CZRnPeG87xr9YJ+TQ
         Beav5aSrqpbVbmQNxHWSV3FfGzqq+t3LsEx4ndI1/NBh8jZxC+abaLgiFbt6mJZcxC+T
         muNm1AvkurWrS0gUWQgAqQTZvv4rRBQl3FdvvSmyl+z/VYlRCCKJbiY/JoBXSLTKn9KV
         17e7dOCv/Z1hibDfCRKsgoPmnaGnim8e7DKpYRFqNPy4Y8L/c2RELfJhNZPen6dzYRah
         3yzw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
        bh=ujkbZE0NUelRwV31uFvRizdYDVtNsFeF22RaQlQq5yI=;
        b=N8PFbkSTAEWYwrr2SRLbb+DZCPwawK3xI2FE91h5x6QQKi+VnrC+dqqswswMSVfd8x
         oMCM4WXSHjNJsBnnkUX3V3EMgRYL6xkNnu1/PtDvHF9+er4oQfBzMJs48XKsxhveUugS
         myVUrssVfxm/G7ziLpJkhCimy2poandBXRdzzVKV+BftMbJdGWmzPP4+Ybw+ZTnROlpH
         0Kq14RIF+XQt0sA2gywcTFzIxFoyKAH9wJP3RuK5qYA+03ATWcveQJy+K9IA2Hw0Ry92
         wSLoK4hOalJHdNjpcSOaq0rpxGudkIsrbXQuGflckt/J/ZZDus2FvN3kwQAw+2RMve9X
         jvGg==
X-Gm-Message-State: AOAM5337dfKlCRl8S7H7J4yCdvXwjhVYn4Uvjpk84jZKVjFXPbelC2z2
	9ta8H+ZcwvIzOytt5bvXifMn26g5ffjw6fWAW5ZQw6Zm6GI7Lw==
X-Google-Smtp-Source: ABdhPJzKYBRLWdDaucilaYyYlTNqpBwxIgF58AIKV6uApTaAXyugaxgffns+y4Fn+LH2iwk1Edtiz5jLfAHrdPQdASI=
X-Received: by 2002:a17:906:4993:: with SMTP id p19mr8839128eju.421.1613925799675;
 Sun, 21 Feb 2021 08:43:19 -0800 (PST)
MIME-Version: 1.0
From: Banibrata Dutta <banibrata.dutta@gmail.com>
Date: Sun, 21 Feb 2021 22:13:08 +0530
Message-ID: <CALODqppU-LamaL6B-5N+gAXfu=O9WDhyA1a7Sp3kWX0M=wxsmQ@mail.gmail.com>
Subject: Error converting .cer to DER encoded .crt file
To: ~alpine/users@lists.alpinelinux.org
Content-Type: multipart/alternative; boundary="000000000000fbcc1005bbdb61da"

--000000000000fbcc1005bbdb61da
Content-Type: text/plain; charset="UTF-8"

Hi

Tried installing a .cer (Private RootCA certificate) file exported from
Windows on my Alpine Linux guest, after copying it into
/usr/local/share/ca-certificates/ directory, which led to the following
error:
WARNING: ca-certificates.crt does not contain exactly one certificate or
CRL: skipping

Did some reading around, including a stackexchange Q&A, and tried
converting the .cer into a DER encoded x509 type .crt file, with the aim to
use this .crt file to add to the CA-certificates on this alpine guest.
However, I got the following error.

dockhost:~$ *openssl x509 -inform DER -in My-PrivateRoot-CA.cer -out
My-PrivateRoot-CA.crt*
unable to load certificate
140527560465224:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong
tag:crypto/asn1/tasn_dec.c:1149:
140527560465224:error:0D07803A:asn1 encoding
routines:asn1_item_embed_d2i:nested asn1
error:crypto/asn1/tasn_dec.c:309:Type=X509

Any help around how to import/add the private root-CA certificate (.cer)
file from Windows (exported from Internet Explorer browser) into Alpine
Linux, would be highly appreciated.

Thanks.

--000000000000fbcc1005bbdb61da
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div>Hi</div><div><br></div><div>Tried installing a .=
cer (Private RootCA certificate) file exported from Windows on my Alpine Li=
nux guest, after copying it into /usr/local/share/ca-certificates/ director=
y, which led to the following error:</div><div><span style=3D"color:rgb(255=
,0,0)"><span style=3D"font-family:monospace">WARNING: ca-certificates.crt d=
oes not contain exactly one certificate or CRL: skipping</span></span><br><=
/div><div><br></div><div>Did some reading around, including a stackexchange=
 Q&amp;A, and tried converting the .cer into a DER encoded x509 type .crt f=
ile, with the aim to use this .crt file to add to the CA-certificates on th=
is alpine guest.

However, I got the following error. <br></div><div><br></div><div><span sty=
le=3D"font-family:monospace"><span style=3D"color:rgb(0,0,255)">dockhost:~$=
</span> <b>openssl x509 -inform DER -in My-PrivateRoot-CA.cer -out My-Priva=
teRoot-CA.crt</b><br><span style=3D"color:rgb(255,0,0)">unable to load cert=
ificate<br>140527560465224:error:0D0680A8:asn1 encoding routines:asn1_check=
_tlen:wrong tag:crypto/asn1/tasn_dec.c:1149:<br>140527560465224:error:0D078=
03A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:crypto/asn=
1/tasn_dec.c:309:Type=3DX509</span><br></span></div><br></div><div>Any help=
 around how to import/add the private root-CA certificate (.cer) file from =
Windows (exported from Internet Explorer browser) into Alpine Linux, would =
be highly appreciated.</div><div><br></div><div>Thanks.<br></div></div>

--000000000000fbcc1005bbdb61da--