Julien Pierre <[EMAIL PROTECTED]> wrote: > liug wrote: >> 4) now try to import it (I already have key3.db and cert7.db created). >> pk12util -i test2.p12 -d . >> it gives: >> pk12util: PKCS12 decode validate bags failed: The user pressed cancel. >> >> any ideas? >> thanks! >> >> frank
> Did you specify a password on your p12 file when you created it ? Does > your database have a password set ? In either of these cases, you must > pass parameters to pk12util on the command-line. I don't believe it will > prompt you for the password. The parameters are -K slotpw (where slotpw > is your database password) and -W p12pw (password of your p12 file). > An easier way is to use PSM in Mozilla and click "Import", and it will > prompt you for any passwords you need to enter. tried using -K -W option, same error. btw, pk12util does prompt for the passwd: pk12util -i test2.p12 -d . Enter Password or Pin for "NSS Certificate DB": Enter password for PKCS12 file: forgot the mention that I am using the tools that comes with SunONE Webserver 6.0sp5 (aka iplanet webserver). I had to export LD_LIBRARY_PATH=/opt/iplanet6/bin/https/lib export PATH=/opt/iplanet6/bin/https/admin/bin:$PATH ls /opt/iplanet6/bin/https/admin/bin ACL.class clmod import restore AclApplet.class clrem importCore rmhttp AclParser.class clxfer importInfo rsrcpckr IdenACE.class commit importSecurity sec-migrate PermACE.class confacc importUsers security ResponseACE.class confadm importWebPub setlang RightVector.class cronctrl importWebPubInfo snmpcomm aclinput distacl index snmpmctl adv distadm install snmptrpc adv.key dnedit lgaccess status adv.rec doauth migrate stopadm avaedit domodify migrateLocalDB tutor calcount dosearch modutil util certutil dsconfig nsesvars viewacc ciphers edit perl viewerr cladd60 genscreen pk12util clctrl getlang rename frank
