Topic: Query about PB7 certificate format support

Hi all,

Has wolfssl latest version support PB7 certificate format?

Share

Re: Query about PB7 certificate format support

Hi,

wolfSSL doesn't support loading certificates in the .p7b format yet.  We do support loading them through .pem and .der files and/or buffers, and through PKCS#12 bundles.

Are you able to convert your .p7b certificate to a different format, or is .p7b mandatory for your use case?

Best Regards,
Chris

Re: Query about PB7 certificate format support

Hi Crisc,

Thank you for your response. It is mandatory to use .p7b as it is also a standard enterprise security format. Can you please suggest us how to integrate support for the same in wolf-3.9.10?

Thanks,
Ravi.

Share

Re: Query about PB7 certificate format support

Hi Ravi,

To get this support added to wolfSSL, we can either:

A.  Add this to our internal desired features list.  There is no official timeline associated with features on this list, and they are added as they are received when we get free time in engineering.

B.  Accelerate this feature addition through wolfSSL engineering services.

Which option would you prefer?

Thanks,
Chris

Re: Query about PB7 certificate format support

Hi Chris,

I will let you know the option. Can you please suggest tools to use for conversion from .p7b to .pem or .cert? Can openssl do the conversion?

Thanks,
Ravi.

Share

Re: Query about PB7 certificate format support

Hi Ravi,

Yes, OpenSSL's command line utility should be able to convert .p7b to .pem, similar to:

openssl pkcs7 -in cert.p7b -inform DER -print_certs -out cert.pem

Best Regards,
Chris