On Aug 14, 2:56 pm, gstandefer <[EMAIL PROTECTED]> wrote:
> I have a situation where I have created a keypair and a cert.
>
> I encrypt a CMS enveloped data with recip info using the public key.
>
> I am able to decrypt this data without any problem.
>
> I then re-create the certificate / keypair.  Both private keys are now
> visible using CERTUTIL (they have the same "alias" which I had assumed
> meant little to NSS).
>
> I then try once more to decrypt using exactly the same code, but now
> it fails on NSS_CMSDecoder_Update() with a SEC_ERROR_BAD_DATABASE.
>
> I had assumed, especially since the NSS db kept the old key around
> that decryption would be no problem.  I also assume NSS would be able
> to figure out which key to use.  What am I missing?
>
> Thanks,
>
> glenn


Nevermind; I can see now I have to keep the old cert around if I'm
going to use the private key...


_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to