<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
I'm using OpenSSL. After working on this all day I finally figured out where I was going wrong, though. Since the certificates were base64, and DER can be base64, I thought I could just load the base64 into the keys manager. Apparently, though, I had to decode the base64 first and then supply the decoded string to the keys manager as a DER-format certificate.<br><br>Sorry to have taken up your time - but hopefully other people will read this and learn from my mistake.<br><br>I do have another question. How long will a certificate of type xmlSecKeyDataTypeSession be kept by the keys manager? How does it decide when a session has ended?<br><br>> Date: Tue, 23 Feb 2010 14:51:14 -0800<br>> From: aleksey@aleksey.com<br>> To: ccgenealogy@hotmail.com<br>> CC: xmlsec@aleksey.com<br>> Subject: Re: [xmlsec] Adding certificates to keys manager<br>> <br>> What error do you get? What crypto library do you use?<br>> <br>> Aleksey<br>> <br>> On 2/23/2010 2:01 PM, Mark Young wrote:<br>> > I have hard-coded a trusted root certificate and I can successfully add<br>> > it to my keys manager using xmlSecCryptoAppKeysMngrCertLoadMemory.<br>> ><br>> > I'm receiving a chain of untrusted X509 certificates in an XML message,<br>> > and I would like to add those certificates to the keys manager as well.<br>> > However, xmlSecCryptoAppKeysMngrCertLoadMemory doesn't seem to work in<br>> > this case. I'm still trying to pinpoint where it's failing - but should<br>> > I be using a different function altogether?<br>> ><br>> > The certificates are base64-encoded X509 certificates.<br>> ><br>> > ------------------------------------------------------------------------<br>> > Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up<br>> > now. <http://clk.atdmt.com/GBL/go/201469229/direct/01/><br>> ><br>> ><br>> ><br>> > _______________________________________________<br>> > xmlsec mailing list<br>> > xmlsec@aleksey.com<br>> > http://www.aleksey.com/mailman/listinfo/xmlsec<br> <br /><hr />Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. <a href='http://clk.atdmt.com/GBL/go/201469229/direct/01/' target='_new'>Sign up now.</a></body>
</html>