Edward Liu wrote:
Edward Liu wrote:

problem with importing a  .pfx mozilla

After entering the master password for the Software Security Device and
the password that was used to encrypt this certificate backup.

I got the message
   The certificate and private key already exist on the security device.

After hours of tracing source code of mozilla , I finally found the reason. The message above is misleading. The truth is x509CertificatePolicies is not supported by mozilla. Is it possible to add this support to mozilla ?


    OD( x509CertificatePolicies, SEC_OID_X509_CERTIFICATE_POLICIES,
    "Certificate Policies",
        CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION ),


I would say that handling of cert policies extensions is not
relevant to cert import UNLESS that extension is marked critical.
Was that extension marked critical in your cert?
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to