Nelson B. Bolyard wrote: > LL wrote: > >>I first do: >>certutil -G \docume~1\llimou~1\mydocu~1\security\server_db >> >>Everything seem to go well, then I get the following message: >>Generating key. This may take a few moments... >> >>I realized that key3.db is the same size as before the key generation. > > > That's normal. The DB is allocated with a minimum of one "page" of memory, > and it doesn't grow until the data in that page exceeds one page. Then > it grows to two pages, etc. Your single key hasn't caused it to grow > to a second page yet. > > Did the keygen ever ask you to type in characters to act as a random > number generator? > > Did it prompt you for a password? > > >>After i try: >>certutil -K \docume~1\llimou~1\mydocu~1\security\server_db >> >>and I get: >>certutil: no keys found: Failure to load dynamic library. > > > I've seen that too. I think this may be a case of an old error message > being displayed because the code is not properly setting a new error code. > > In other words, I'm not sure that you're actually having a problem due > to a DLL load failure. During the couse of NSS initialization, NSS atttempts > to load some DLLs that often don't exist. That's not a fatal problem. > > If the code that looks for keys doesn't set a new error code, you get > the left over error code. > > >>I am using nss-3.4.1 and nspr-4.1.2. The bin and lib directories of each >>are in the path. >> >>What is going on? HELP!!!! > > > The real question in my mind is: did you get a new key pair gen'ed or not? > Is the failure a failure to gen (and the -K command is correctly reporting > no keys found)? > Or is the key being genned, but the -K command isn't finding it? > > Did you get prompted for passwords in either command? > > >>-LL > > > > -- > Nelson Bolyard > Disclaimer: I speak for myself, not for Netscape
I do get a message to type in random characters for the seed. And I also get to type a password to access the DB. Certutil never asks me to enter a password for the generated private key though (i'm puzzled about that!!) For "certutil -K", I also get prompted for a password for the DB. -Leonce
