Thank for that advice. I can see that there definitely is something wrong with
the PKCS#12 (no attributes).
This is the PKCS#12 that I generate with Mono using the code found in
MakeCert.cs:
MAC Iteration 2000
MAC verified OK
PKCS7 Encrypted data: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2000
Certificate bag
Bag Attributes: <No Attributes>
subject=/C=DK/O=Ingen organisatorisk tilknytning/CN=Nancy Ann
Berggren/serialNumber=PID:9208-2001-1-538257423
issuer=/C=DK/O=KMD/OU=KMD/CN=KMD Intern Test - KUN TIL TEST/NO LIABILITY GIVEN
-----BEGIN CERTIFICATE-----
MIIEmjCCA4KgAwIBAgIEQoB3RTANBgkqhkiG9w0BAQUFADBlMQswCQYDVQQGEwJE
SzEMMAoGA1UEChMDS01EMQwwCgYDVQQLEwNLTUQxOjA4BgNVBAMTMUtNRCBJbnRl
cm4gVGVzdCAtIEtVTiBUSUwgVEVTVC9OTyBMSUFCSUxJVFkgR0lWRU4wHhcNMDUw
NTEwMDg1NjM3WhcNMTAwNTEwMDg1NjM3WjB5MQswCQYDVQQGEwJESzEpMCcGA1UE
ChMgSW5nZW4gb3JnYW5pc2F0b3Jpc2sgdGlsa255dG5pbmcxGzAZBgNVBAMTEk5h
bmN5IEFubiBCZXJnZ3JlbjEiMCAGA1UEBRMZUElEOjkyMDgtMjAwMS0xLTUzODI1
NzQyMzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAvw9Kz4/Vy+z+zBMSnOfG
Mc3PbFiiNOiSHys54eE8COieaNwR3Wb0nJG8BC/AgchVZnLXqns1kZd5Fd5Il8Zr
ypaz7hpI/RPTU/I47axF/bpRWnNCGsewynfd6A+6Z0+tWqctxt+Q0bOG0cauc6kl
heNPBgA7mCjatIcq6hfNg8sCAwEAAaOCAcAwggG8MA4GA1UdDwEB/wQEAwID+DCC
ATYGA1UdIASCAS0wggEpMIIBJQYJKQEBAQEBAQEBMIIBFjAdBggrBgEFBQcCARYR
aHR0cDovL3d3dy5rbWQuZGswgfQGCCsGAQUFBwICMIHnGoHkRGV0dGUgZGlnaXRh
bGUgY2VydGlmaWthdCBlciB1ZGVsdWtrZW5kZSB0aWwgdGVzdGJydWcgb2cga2Fu
IGlra2UgYW52ZW5kZXMgdGlsIGZvcnBsaWd0ZWRlIGFmdGFsZXIgZWxsZXIgbGln
bmVuZGUuIERldCBza2FsIHNhbXRpZGlnIG5vdGVyZXMgYXQgZGVyIGlra2UgbGln
Z2VyIGVuIHVkc3RlZGVsc2VzcG9saXRpayB0aWwgZ3J1bmQgZm9yIHVkc3RlZGVs
c2VuIGFmIGRldHRlIGNlcnRpZmlrYXQuMAkGA1UdEwQCMAAwJQYDVR0RBB4wHIEa
bmFuY3lfYmVyZ2dyZW5AbmV0aG90ZWwuZGswHQYDVR0OBBYEFO1vQMQvzQHkNncD
kw9qW1NhWhU3MB8GA1UdIwQYMBaAFNj67FB6jYzQ14n4/FjU3OvZmJlQMA0GCSqG
SIb3DQEBBQUAA4IBAQA1sEsnZpQUc/0kYubETfRln1pO/0aIh1aUXCCCqfiE5NlP
HF7DgOltHJME2mr7RFcLaKCaMJR9ZboMxTCWN3kjGbFMEq1O4SO5/9anAzvRlyDF
QIpMfc5LOpD4JUVrbKFqR04BzuTpspD7MHqsRyXyCcwEqxFP9E0ErYRvU4/80Nhv
kiQOkkwEYBHg+2Z5LC2v1AmS8byEOJ4Wk3BEufmLmJTEPJgCcHUoGoNWVRs3gS40
2lVI2EWk9+hcV8jhzIM9wJuZU2kENZoh4/gv1LcRiHdsh2fe2RmRN04r7yx1jfxT
ydvgoU16WWkr42q+lYC8lwA+86T92aXrEddEH+dm
-----END CERTIFICATE-----
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2000
Bag Attributes: <No Attributes>
Key Attributes: <No Attributes>
This is the "same" PKCS#12 I generate with OpenSSL:
MAC Iteration 1
MAC verified OK
PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2048
Certificate bag
Bag Attributes
localKeyID: 56 58 1F EA A7 6C 16 56 2D 06 82 FC 58 1D 81 3F 5E D8 66 69
subject=/C=DK/O=Ingen organisatorisk tilknytning/CN=Nancy Ann
Berggren/serialNumber=PID:9208-2001-1-538257423
issuer=/C=DK/O=KMD/OU=KMD/CN=KMD Intern Test - KUN TIL TEST/NO LIABILITY GIVEN
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048
Bag Attributes
localKeyID: 56 58 1F EA A7 6C 16 56 2D 06 82 FC 58 1D 81 3F 5E D8 66 69
Key Attributes
X509v3 Key Usage: 10
But how do I set the correct attributes?
That doesn't seem to be handled in the example.
Thanks!
/Kim
-----Oprindelig meddelelse-----
Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] På vegne af Julien Gilli
Sendt: 22. september 2005 09:32
Til: [email protected]
Emne: Re: SV: [Mono-list] PKCS#12 example
Hellan.Kim KHE wrote:
>So whenever I try to install this PKCS#12, the certificate is put in the
>"Other people" category instead of "Personal" due to the "missing"
>private key.
>
>
>
Have you tried to examine the PKCS#12 file with "openssl pkcs12" to make
sure that everything is in the right place ?
Regards,
--
Julien Gilli
IDEALX http://www.idealx.com/
_______________________________________________
Mono-list maillist - [email protected]
http://lists.ximian.com/mailman/listinfo/mono-list
_______________________________________________________________________________________
www.kmd.dk www.kundenet.kmd.dk www.eboks.dk www.civitas.dk
www.netborger.dk www.organisator.dk
Hvis du har modtaget denne mail ved en fejl vil jeg gerne, at du informerer mig
og sletter den.
KMD skaber it-services, der fremmer effektivitet hos det offentlige,
erhvervslivet og borgerne.
If you received this e-mail by mistake, please notify me and delete it. Thank
you.
Our mission is to enhance the efficiency of the public sector and improve its
service of the general public.
_______________________________________________
Mono-list maillist - [email protected]
http://lists.ximian.com/mailman/listinfo/mono-list
