OpenSSL::X509::CertificateError when i use mac ox keychain tools export .p12 file.

[guange2015]

core.rb:69:in `initialize': nested asn1 error (OpenSSL::X509::CertificateError)

[jpoz]

What's this fixing?

[guange2015]

fixed.

[jpoz]

No idea what this is fixing.

What was the specific issue with mac ox keychain tool expert that you were having?

[guange2015]

to make .p12, i use keychain export in mac osx, not use your guide
openssl pkcs12 -in cert.p12 -out cert.pem -nodes -clcerts
like this:http://www.digicert.com/ssl-support/p12-import-export-mac-server.htm

occur in this time
core.rb:69:in `initialize': nested asn1 error (OpenSSL::X509::CertificateError)

[kaluznyo]

Same error with your openssl pkcs12 -in cert.p12 -out cert.pem -nodes -clcerts and APNS version 1.0 (master)

[dgalarza]

I was having a similar issue with this yesterday, however the problem was related to how I was exporting from the keychain tool.. The p12 I was generating was based off of the certificate alone. You must include the private key as well when exporting to a p12, expanding the certificate in the keychain tool and selecting the cert and the key before exporting. I was then able to run openssl pkcs12 on the p12 to generate a working cert resolving the OpenSSL::X509::CertificateError.

[guange2015]

my pull request can use origin p12 file, not required translate p12 to pem.

the new version
nerdsRob/APNS#2