On Aug 14, 2:56 pm, gstandefer <[EMAIL PROTECTED]> wrote: > I have a situation where I have created a keypair and a cert. > > I encrypt a CMS enveloped data with recip info using the public key. > > I am able to decrypt this data without any problem. > > I then re-create the certificate / keypair. Both private keys are now > visible using CERTUTIL (they have the same "alias" which I had assumed > meant little to NSS). > > I then try once more to decrypt using exactly the same code, but now > it fails on NSS_CMSDecoder_Update() with a SEC_ERROR_BAD_DATABASE. > > I had assumed, especially since the NSS db kept the old key around > that decryption would be no problem. I also assume NSS would be able > to figure out which key to use. What am I missing? > > Thanks, > > glenn
Nevermind; I can see now I have to keep the old cert around if I'm going to use the private key... _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto