Home / server / Questions / 591090
Accepted
exeral
Asked: 2014-04-25 06:03:42 +0800 CST

DER encoded hash

  • 772

according to the manpage of stunnel4

the certificates in this directory should be named XXXXXXXX.0 where XXXXXXXX is the hash value of the DER encoded subject of the cert (the first 4 bytes of the MD5 hash in least significant byte order).

How can I produce a such thing ?

I tried, unsuccessfully :s :

openssl x509 -in cert.crt -inform PEM -out cert.der -outform DER

then

openssl dgst cert.der
ssl-certificate

2 Answers

  1. Best Answer

    Try this:

    # openssl x509 -in cert.pem -noout -hash
c59f9aac

    This will give you the hash that OpenSSL is expecting to get for a certificates directory.

    • 3

  2. c_rehash, openssl rehash

    Create symbolic links to files named by the hash values.

    See man c_rehash or openssl rehash:

    On some platforms, the openssl rehash command is available as an external script called c_rehash. They are functionally equivalent, except for minor differences noted [in the manpages].

    • 2