A pkcs12 file does not contain cert7.db and key3.db. But it contains the nessessery stuff to create those.
You have to create those databases with the certutil and import the pkcs12 into it. (The key will end up in key3.db and the cert(s) in cert7.db or cert8.db.)
To import the pkcs12:
../nss-3.9/bin/pk12util -i test.p12 -d dbdir
And read the "certutil -H"


You will find the tools for this in the binary dist.:
ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_9_RTM/

Good luck!
Emil Assarsson

Richard (Tor) wrote:

We have just renewed our ceritificate but faced with a challenge.

For some reason, Netscape 4 after downloaded the new cert from Verign,
we did not get the usual 2 files (cert7.db and key3.db). Instead, we
had a .p12 file which contains cert7 and key3 files. Since the
Netscpe signing tool requires both these files rather than the .p12
file, we are stuck.


What is the best way to handle this.  Is there a utility to extract
these 2 files from the .p12 file ?

Appreciate that.

please email to [EMAIL PROTECTED]

Regards,
Richard
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to