"E. Jay Berkenbilt" wrote:
>
>
> > Also try a different password when you export the file from Netscape.
>
> How odd. This worked. Why would that work? I used a different
> export password from the PEM pass phrase. I'm curious -- what made
> you think to suggest this? I know nothing about pkcs12 and am just
> learning about SSL, but I always like to know what's going on and
> usually take the trouble to find out.... Thanks for your help.
>
I've seen problems like this before. There was one a while ago with MSIE
and empty passwords, that one turned out to be a distinction between
blank and empty passwords in MSIE.
Its also possible that the algorithm that Netscape and OpenSSL uses to
derive keys from passwords and salts for PKCS#12 don't agree under
certain rare circumstances. You could see if this is consistent
behaviour: i.e. does the OpenSSL pkcs12 utility always fail when you use
that particular password?
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
