Cisco Cisco Web Security Appliance S670 Guida Utente

The root certificate and private key files you upload to the appliance must be in PEM format. DER format 
is not supported. However, you can convert certificates and keys in DER format into the PEM format 
before uploading them. For example, you can use OpenSSL to convert the format.

Use the following OpenSSL command to convert a DER formatted certificate file to a PEM formatted 
certificate file:

openssl x509 -inform DER -in 

 -outform PEM -out 

 

You can also convert key files in DER format into the PEM format by running a similar OpenSSL 
command. 

For RSA keys, use the following command:

openssl rsa -inform DER -in 

 -outform PEM -out 

 

For DSA keys, use the following command:

openssl dsa -inform DER -in 

 -outform PEM -out 

 

For more information about using OpenSSL, see the OpenSSL documentation, or visit 
http://openssl.org.