Edward Liu wrote:
Edward Liu wrote:
problem with importing a .pfx mozilla
After entering the master password for the Software Security Device and
the password that was used to encrypt this certificate backup.
I got the message
The certificate and private key already exist on the security device.
After hours of tracing source code of mozilla , I finally found the
reason. The message above is misleading. The truth is
x509CertificatePolicies is not supported by mozilla. Is it possible to
add this support to mozilla ?
OD( x509CertificatePolicies, SEC_OID_X509_CERTIFICATE_POLICIES,
"Certificate Policies",
CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION ),
I would say that handling of cert policies extensions is not
relevant to cert import UNLESS that extension is marked critical.
Was that extension marked critical in your cert?
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto