On Feb 24, 7:57 pm, Nelson B Bolyard <nel...@bolyard.me> wrote: > On 2012/02/24 07:26 PDT, VictorMiller wrote: > > > > > I have a new PKI certificate as a .p12 file which I want to import > > into firefox and thunderbird on a RedHat system. However, every time > > I try an import I get the above error message. If I log onto an MS > > Windows machine I can get IE to import it without a problem. I've > > tried all sorts of things, such as moving all of my .db files > > in .thunderbird out of the way, and letting thunderbird create new > > ones. I've even tried moving my whole .thunderbird directory out of > > the way. Nothing works. Here's a strange thing -- even if I > > deliberately give the wrong password for the encrypted .p12 file I > > still get the same stupid error message. Any suggestions as to how to > > debug this? > > My guess is that your .p12 file has no "friendly name" in it. The utility > program pk12util can confirm or refute this. If that's it, the solution is > to create a new .p12 file with the same certs/keys and a printable ASCII > friendly name. > > -- > 12345678901234567890123456789012345678901234567890123456789012345678901234567890
Here's some more information. When I try to import the certificate using pkutil -i I get the following error message: PKCS12 decode import bags failed: Unable to find the certificate or key necessary for authentication. I've checked that I have the certificates for all the right authorities (I've checked with my help desk to find out which ones), and that in FF and thunderbird I have all the boxes checked. This is really maddening. Victor -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
