Re: openssl key/cert - NS key/cert db

2002-12-18 Thread Julien Pierre
Nelson B. Bolyard wrote: .p12 files contain the nickname for the certs. When mozilla imports a cert from a .p12 file, it uses the nickname found in the .p12 file. If I'm not mistaken, iPlanet web server requires that the server's cert have a particular nickname. It's possible that this was a

Re: openssl key/cert - NS key/cert db

2002-12-16 Thread Julien Pierre
liug wrote: Nelson B. Bolyard [EMAIL PROTECTED] wrote: liug wrote: How can I use the NSS tools to convert a openssl generated key pem file to netscape key3.db ? I believe there is some OpenSSL program that will create a .p12 file (a.k.a PFX file) from your key/cert. Mozilla can import

Re: openssl key/cert - NS key/cert db

2002-12-13 Thread Kai Engert
liug wrote: How can I use the NSS tools to convert a openssl generated key pem file to netscape key3.db ? Thanks! Frank You probably can't convert it, because a pem file is a simple collection of certs, but a key3.db is a complex database. You might want to create a database and use

Re: openssl key/cert - NS key/cert db

2002-12-13 Thread Julien Pierre
liug wrote: 4) now try to import it (I already have key3.db and cert7.db created). pk12util -i test2.p12 -d . it gives: pk12util: PKCS12 decode validate bags failed: The user pressed cancel. any ideas? thanks! frank Did you specify a password on your p12 file when you created it ?

Re: openssl key/cert - NS key/cert db

2002-12-13 Thread liug
Julien Pierre [EMAIL PROTECTED] wrote: liug wrote: 4) now try to import it (I already have key3.db and cert7.db created). pk12util -i test2.p12 -d . it gives: pk12util: PKCS12 decode validate bags failed: The user pressed cancel. any ideas? thanks! frank Did you specify