Anotnio - assuming I understood your question correctlly -

"When I attempt to import the CA cert to the smartcard, why does'nt the
NSS create a 'new' cert in the token store (on the smartcard)? Instead,
you just see a copy over of the CA cert to the token store"

I think the reason is that when you attempt to move a CA cert, you do
not have its corresponding private key and the NSS will not let you
'own' the CA cert. The smartcard is a secure storage for only the certs
that the individual entity owns. The 'public' CA cert is exactly
that...'public' so there is no reason to move it elsewhere.

Vivek.

_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to