Further info: I tried the above steps (generate CA, generate user cert, try to export user cert as p12) on Fedora 29 which also has NSS 3.41
nss-3.41.0-3.fc29.rpm It worked: pk12util -d sql:. -o user1.p12 -n user1 Enter password for PKCS12 file: Re-enter password: pk12util: PKCS12 EXPORT SUCCESSFUL And so it looks to me like the pk12util error --- pk12util -d sql:. -o user1.p12 -n user1 Error attempting to export certificates. --- is specific to Debian Buster or maybe to the exact (minor) nss3-tools version (patch level) 2:3.41-1. Hope this addendum is useful. -- Kostya Vasilyev k...@fastmail.com On Mon, Jan 21, 2019, at 11:21 PM, Debian Bug Tracking System wrote: > Thank you for filing a new Bug report with Debian. > > You can follow progress on this Bug here: 920041: > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920041. > > This is an automatically generated reply to let you know your message > has been received. > > Your message is being forwarded to the package maintainers and other > interested parties for their attention; they will reply in due course. > > Your message has been sent to the package maintainer(s): > Maintainers of Mozilla-related packages <team+pkg-mozi...@tracker.debian.org> > > If you wish to submit further information on this problem, please > send it to 920...@bugs.debian.org. > > Please do not send mail to ow...@bugs.debian.org unless you wish > to report a problem with the Bug-tracking system. > > -- > 920041: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920041 > Debian Bug Tracking System > Contact ow...@bugs.debian.org with problems