by using this resource(http://books.mozdev.org/chapters/ch12.html) i have success!

markus siebeneicher wrote:
hallo list,

i am using certutil (nss-3.9.2 win95) to create my own Certification for using in my signed mozilla scripts.

this is the prozedure:


// creating a new cert8.db, key3.db and secmod.db certutil.exe -d CA -N


// add a new certification certutil.exe -d CA -S -s "CN=test" -n test -x -t "C,C,C" -1 -2 -5 -m 1234

typing key...

5 // cert signing key
9 // other
yes // is this critical extension [y/n] ?
yes // is this a CA certificate [y/n] ?
3 // enter path length constraints ...
yes // is this critical extension [y/n] ?
7 // Object Signing CA
9 // other
yes // is this critical extension [y/n] ?


certutil.exe -d CA -L >> test Cu,Cu,Cu

certutil.exe -d CA -V -n test -u C -e -l
 >> test: certificate key usage inadequate for attempted operation.

so i wonder whats wrong? i m using the right options/params for my Cert creation? have i create an extra key for my attempted operation(certification for signed scripts)


also tried out all the steps from this resource (http://certs.mozdev.org/cadraft.html) but failed again with validation.


many thanks for any comments or suggestions!!

markus siebeneicher
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to