Howdy,
I'm working in InstallShield to create a web installer for one of our
software packages. The installer for IE builds fine, but Firefox
requires a Netscape certificate. InstallShield is supposed to build this
automatically, but something is wrong with my settings and I'm having
some difficulty getting the certificate created manually, using certutil
and signtool.
- I'm running Windows XP
- I've downloaded NSS 3.6 and NSPR 4.6 from ftp.mozilla.org
- I've copied the files from these packages to my working directory,
C:\Program Files\InstallShield\2009\System
I'm using NSS 3.6 because the InstallShield setup will look for cert7.db
instead of cert8.db. Newer versions of NSS create a cert8.db. I don't
know which version of NSPR I should be using. I know that signtool.exe
is Mozilla's version, not Microsoft's.
The first thing I tried to do in cmd prompt was change to my working
directory and run certutil -N -d .
This prompted me to enter a password 3 times. Then the program finished.
It created 3 .db files.
I ran...
certutil -S -x -k rsa -n mozillaCertificate -s "CN=mozillaCertificate,
O=My Company, C=US" -t "TCu" -d .
It had me type a bunch of random keys and enter a password for "NSS
Certificate DB" again. Then came "Generating key. This may take a few
moments..." and that was the end.
I then closed my Mozilla apps and ran signtool -p"mypassword123" -k
mozillaCertificate .
It generated a bunch of files and then at zigbert.sf
signtool: PROBLEM signing data (Certificate not approved for this
operation)
the tree "." was NOT SUCCESSFULLY SIGNED
So I went back and do a certutil -L and out came this.
certutil: NSS_Initialize failed: security library: bad database.
There's some user error involved somewhere. I was an art student, so
I'll admit I am a tad out of my element. Any assistance will be greatly
appreciated. Thanks in advance.
David
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
