On Wednesday, January 14, 2015 at 2:36:45 PM UTC-5, Robert Daniels wrote:
> On Wednesday, January 14, 2015 at 11:27:50 AM UTC-5, John Dennis wrote:
> > On 01/14/2015 09:58 AM, Robert Daniels wrote:
> > > Trying as you suggested today, but ran into some other thing which is 
> > > puzzling.
> > > 
> > > When I call cert = find_cert_from_nickname(nn, pwd) I successfully pull 
> > > the server cert.
> > > I then call find_key_by_any_cert(cert, certpassword) I get an object back 
> > > (nss.nss.PrivateKey).
> > > 
> > > So, presumably the PK exists for the cert.
> > > 
> > > However, after calling pkcx12_data = nss.pkcs12_export(nn, pwd) it throws 
> > > an exception with "Private Key could not be located and exported". 
> > > 
> > > So confused as why I can get a PrivateKey object, but not export it with 
> > > the cert. 
> > 
> > Does it work using pk12util?
> > 
> > 
> > -- 
> > John
> 
> 
> Using pk12util as:
> 
> pk12util -n <server cert nickname> -d sql:<nssdb dir> -o newfile.p12
> 
> I observe that the private key, server certs and CA chain are included in the 
> p12 file.

Make that server cert.... singular. 
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to