generate .csr in SAP PI gives junk characters .pem .csr

[former_member190239]

Hi Experts,

I am trying to generate csr from one of the key views.

There are two options to download the csr file . one in .pem and the other as .csr

When I download the csr file as Base64 PKCS #10 .pem file is fine but CA requested file in .csr

When I download the csr file as binary PKCS#10 the file has junk characters

[Former Member · Accepted solution]

binary has not just printable chars, but also non printable ones, they are not junk

Base64 is made to have only printable chars.

To the problem. Rename the file from xxyyzz.pem to xxyyzz.csr and your CA will swallow it.

[former_member190239]

Thanks Robert,

But being new SSL , I read .pem is different from .csr essentially carrying same info but as you have mentioned depends on CA

[former_member190239]

Thanks Robert,

Yes , we had to go ahead with renaming and the CA seems to have digested (the message digest) .

Just trying to decipher the .pem vs .csr scope and if .csr is the restricted mode by the CA , if there is a better way to download the same instead of the rename.

[Former Member]

Hi Ravi,

.pem or .csr are just file extensions. Both will have inside

-----BEGIN CERTIFICATE REQUEST-----
MIICVDCCATwCAQAwDzENMAsGA
...
Vg72jl75Ry0Qr3BG4SfXvE2rxk6BR+
-----END CERTIFICATE REQUEST-----

The binary file has the same information, just in binary form.

All of them are fine. Your CA will .csr, then give them .csr.

Other CAs will require e.g. csr.txt or .zip because e-mail server or client blocks extensions like .csr .der. .crt.

Other probably something else.