Re: Generate PKCS12 not containing CA certificates

2008-09-25 Thread Paco
On 24 sep, 20:08, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Paco wrote, On 2008-09-24 04:17: > > > On 22 sep, 21:19, Nelson B Bolyard wrote: > > you can't also export a pkcs12 containing just CA certifcates, which I > > belive is something accepted in the pkcs12 standard, > > Mere certificates

Re: Generate PKCS12 not containing CA certificates

2008-09-24 Thread Nelson B Bolyard
Paco wrote, On 2008-09-24 04:17: > On 22 sep, 21:19, Nelson B Bolyard wrote: > you can't also export a pkcs12 containing just CA certifcates, which I > belive is something accepted in the pkcs12 standard, Mere certificates which need no encryption. There is no need to use PKCS#12 to transfer the

Re: Generate PKCS12 not containing CA certificates

2008-09-24 Thread Paco
On 22 sep, 21:19, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Paco wrote, On 2008-09-21 23:46: > > > I read the elf headers for every > > shared library distributed with firefox and the symbol > > SEC_PKCS12AddCertAndKey was defined, but SEC_PKCS12AddCert and > > SEC_PKCS12AddKeyForCert weren't

Re: Generate PKCS12 not containing CA certificates

2008-09-22 Thread Nelson B Bolyard
Paco wrote, On 2008-09-21 23:46: > I read the elf headers for every > shared library distributed with firefox and the symbol > SEC_PKCS12AddCertAndKey was defined, but SEC_PKCS12AddCert and > SEC_PKCS12AddKeyForCert weren't (neither the function that derives > key thumbprint from the cert). Th

Re: Generate PKCS12 not containing CA certificates

2008-09-21 Thread Paco
On 19 sep, 18:14, Kaspar Brand <[EMAIL PROTECTED]> wrote: > > Using NSS PKCS12 API, is there any way to generate a p12 file that > > includes just the personal certificate and the key I want, keeping > > the intermediate and root CAs for that cert away of the file? > > Yes, AFAICT. You can't use S

Re: Generate PKCS12 not containing CA certificates

2008-09-19 Thread Kaspar Brand
> Using NSS PKCS12 API, is there any way to generate a p12 file that > includes just the personal certificate and the key I want, keeping > the intermediate and root CAs for that cert away of the file? Yes, AFAICT. You can't use SEC_PKCS12AddCertAndKey(), however, because this will unconditionall

Generate PKCS12 not containing CA certificates

2008-09-19 Thread Paco
Hi everyone. Using NSS PKCS12 API, is there any way to generate a p12 file that includes just the personal certificate and the key I want, keeping the intermediate and root CAs for that cert away of the file? Thanks for your help. ___ dev-tech-crypto m