Hi

I'm trying to generate a Certificate Signing Request to be later signed by a CA 
and imported to a NSS database.

Currently Using the following commands:

certutil -R -d alias -f nssPasswordFile -s "sample-dn" -n "sample-dn" -k "rsa" 
-g 2048 -o cert.req -a -z noiseFile

Then using sslget to receive a successful response and import it using:

certutil -A -s "sample-dn" -n "sample-dn" -a -d alias -f nssPasswordFile -t ",,"

The problem is when I use certutil to list all private keys. I get something 
like:

< 9> rsa      c679865c65628623c59ab392019943ef426aa2e1   NSS Certificate 
DB:sample-dn

And when I use a PKCS11Wrapper in Java I get a Private Key with the correct ID 
but a <NULL-PTR> in the label.

Note: When I use pk12util I can successfully export and then import in the 
firefox nss database and appears good.

Thanks
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to