PEM

From Just Solve the File Format Problem
Revision as of 22:30, 17 October 2013 by Jsummers (Talk | contribs)

Jump to: navigation, search
File Format
Name PEM
Ontology
Extension(s) .pem, others

PEM (Privacy-Enhanced Mail) refers both to the secure email format defined in RFC 1421 and related RFCs, and (much more commonly) to the loosely-defined family of formats inspired by RFC 1421 format. This article is about the whole family of PEM formats. For information specific to the original PEM format, refer to Privacy-Enhanced Mail (RFC 1421).

PEM formats are usually related to encryption, especially public-key encrypted communications. Most of them are not related to email, so calling them Privacy-Enhanced Mail is confusing. Some of the most common formats were apparently invented by the SSLeay/OpenSSL developers.

Format

This section describes PEM format in general, but it has not been confirmed to be correct for every specific PEM format.

A PEM file is plain text. It contain one or more objects, such as certificates or keys, which may not all be the same type. Each object is delimited by lines similar to "-----BEGIN ...-----" and "-----END ...-----". Data that is not between such lines is ignored, and is sometimes used for comments.

Following the "BEGIN" and "END" keywords is a name (such as "CERTIFICATE") that can be used as an identifier for the type of object.

The data between the delimiter lines starts with an optional email-like header section, followed by base64-encoded payload data.

List of PEM Formats

This list is not complete.

Identifier Description
CERTIFICATE Refer to PEM encoded certificate.
CERTIFICATE REQUEST
PKCS7
PKCS #7 SIGNED DATA
PRIVACY-ENHANCED MESSAGE Refer to Privacy-Enhanced Mail (RFC 1421).
RSA PRIVATE KEY
X509 CRL
Personal tools
Namespaces

Variants
Actions
Navigation
Toolbox