Thanks, I managed to convert the key this way and added it to factotum.

I think I also need to add the server's CA's certificate, so factotum can
check the server identity. Right?

I converted the CA crt to DER like this:
openssl x509 -in ca.crt.pem -inform PEM -out ca.crt.der -outform DER

Not I'm trying to convert this DER to the factotum format :
asn12rsa -t 'proto=rsa service=tls owner=*' ca.crt.der > ca.crt.plan9

but asn12rsa complains :
asn12rsa: couldn't parse asn1 key


2013/12/17 David du Colombier <0intro@gmail.com>

> > I tried to do the opposite : generating keys as PEM using linux's
> > openssl, then convert them to plan9 format using pemdecode without
> > success.
>
> You have to convert the key from PEM to DER with OpenSSL,
> then convert it to the Factotum format using auth/asn12rsa:
>
> openssl rsa -in key.pem -inform PEM -out key.der -outform DER
> auth/asn12rsa -t 'proto=rsa service=tls owner=*' key.der >key
>
> --
> David du Colombier
>
>


-- 
Jean-André Santoni