WS-Security? Blast from the past ? ? To fill in the BinarySecurityToken field, take the PEM version of the cert, strip off the leading and trailing marker lines ---BEGIN? and output that. To generate the signature look at the pkeyutl app. (Sorry, don?t remember any other details) -- Senior Architect, Akamai Technologies IM: richsalz at jabber.at Twitter: RichSalz -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150424/a5c093fb/attachment.html>