pkcs7(1ssl)pkcs7(1ssl)NAMEpkcs7 - PKCS#7 utility
openssl pkcs7 [-inform PEM | DER] [-outform PEM | DER] [-in filename]
[-out filename] [-print_certs] [-text] [-noout]
Specifies the input format. The DER format is DER encoded PKCS#7 v1.5
structure. The PEM format (the default) is a base64 encoded version of
the DER form with header and footer lines. Specifies the output for‐
mat. The options have the same meaning as the -inform option. Speci‐
fies the input filename to read from or standard input if this option
is not specified. Specifies the output filename to write to or stan‐
dard output by default. Prints out any certificates or CRLs contained
in the file. They are preceded by their subject and issuer names in
one-line format. Prints out certificate details in full rather than
just subject and issuer names. Does not output the encoded version of
the PKCS#7 structure (or certificates if -print_certs is set).
The pkcs7 command processes PKCS#7 files in DER or PEM format.
The PEM PKCS#7 format uses the header and footer lines:
For compatability with some CAs it will also accept:
There is no option to print out all the fields of a PKCS#7 file.
These PKCS#7 routines only understand PKCS#7 v 1.5 as specified in
RFC2315. For example, they cannot currently parse the new CMS as
described in RFC2630.
Convert a PKCS#7 file from PEM to DER:
openssl pkcs7-in file.pem -outform DER -out file.der
Output all certificates in a file:
openssl pkcs7-in file.pem -print_certs -out certs.pem