Thanks, I managed to convert the key this way and added it to factotum.

I think I also need to add the server's CA's certificate, so factotum can check the server identity. Right?

I converted the CA crt to DER like this:

openssl x509 -in ca.crt.pem -inform PEM -out ca.crt.der -outform DER

Not I'm trying to convert this DER to the factotum format :

asn12rsa -t 'proto=rsa service=tls owner=*' ca.crt.der > ca.crt.plan9

but asn12rsa complains :

asn12rsa: couldn't parse asn1 key

2013/12/17 David du Colombier <0intro@gmail.com>

> I tried to do the opposite : generating keys as PEM using linux's
> openssl, then convert them to plan9 format using pemdecode without
> success.

You have to convert the key from PEM to DER with OpenSSL,
then convert it to the Factotum format using auth/asn12rsa:

openssl rsa -in key.pem -inform PEM -out key.der -outform DER
auth/asn12rsa -t 'proto=rsa service=tls owner=*' key.der >key

--
David du Colombier

--
Jean-André Santoni