I generated a client SSL certificate (tried both by using openssl and certutil) converted it to PKCS#12 format. After that, I imported it into Firefox and can see the certificate of the "Your Certificates" tab in Edit > Preferences > Advanced > View Certificates.
However, when I do the TLS handshake, the client never sends a certificates - the certificate callback function always fails and the client sends a TLS alert 41 instead.
What should I do to make NSS/PSM detect the client SSL certificate that I imported into Firefox?
The certificate extensions I am using are:
Certificate Type: SSL Client
Certificate Key Usage: Digital Signature, Key Encipherment
Regards,
Peter
_______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto