OpenSAML user discussion

["Scott Cantor" <>]

> The signtest program is just what I would like to try
> since testing java, c, and third party FIM is what I
> am doing. I did use openssl to generate those key and
> cert and I also verified the key and cert are good by
> using openssl tool. 

Ah, ok.

> I wonder what kind of format of
> the key storage is required by opensaml, such as I am
> using DER. Is DER acceptable for opensaml? If I use
> java keytool to generate those key and cert, does
> opensaml in C accept them?

That program isn't user friendly, but I think the files just have to be in
PEM format. It manually strips off the headers and has to feed the data into
the security library, which didn't support PEM directly but required the
input to be base64 DER, basically everything but the BEGIN/END lines.

So no, DER won't work unless you run it into openssl base64 -e first.

-- Scott