I have a situation where I have created a keypair and a cert. I encrypt a CMS enveloped data with recip info using the public key.
I am able to decrypt this data without any problem. I then re-create the certificate / keypair. Both private keys are now visible using CERTUTIL (they have the same "alias" which I had assumed meant little to NSS). I then try once more to decrypt using exactly the same code, but now it fails on NSS_CMSDecoder_Update() with a SEC_ERROR_BAD_DATABASE. I had assumed, especially since the NSS db kept the old key around that decryption would be no problem. I also assume NSS would be able to figure out which key to use. What am I missing? Thanks, glenn _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto