Nelson B wrote:
> nospam wrote:
>>I'm using linux, and failing to create key pairs for mozilla. The
>>problem is that I have yet to figure out the right way to use the
>>openssl tools for creating a key pair in the pkcs12 that mozilla will
>>import. 
[...]
> This is the wrong place to ask for help with OpenSSL.  OpenSSL is the
> competition to mozilla.  One doesn't ask questions about a Mercedes in
> a newsgroup dedicated to discussing Porsche automobiles, and vice versa.

I agree this may be somewhat wrong place to ask this question. I would
advice the OpenSSL users forum. You should state very clearly what you
want - reading your message I can not tell what exactly it is you are
trying to do. See http://www.openssl.org/support/

However, I somewhat disagree with Nelson about the competition issues.
Both OpenSSL and NSS are open source, and while there certainly is
competition about them, it's not the same as with closed source
libraries. It would be beneficial for both NSS and OpenSSL to have
interoperability instructions for them.

> But the bigger question is this:  Mozilla is quite capable of generating
> its own RSA key pairs, requesting certificates for them, importing
> those certificates, exporting the key and cert in a PKCS12 file (if
> desired) and using the key and cert for client authentication.
> So, why do you want to get OpenSSL involved?

Maybe this person's requirements are such that it makes sense to use
OpenSSL (just a guess, since he did not provide enough info). Or maybe
he is more familiar with OpenSSL and can create the stuff he needs with
it easily, the only problem now being how to interoperate with Mozilla/NSS.

-- 
  Heikki Toivonen
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to