RE: Problem importing Certs in Netscape windows.

[Francisco Javier Martínez Martínez]

Thanks a lot, but I had done what you suggest me, and  the browsers saids
the same, that the certificate is not valid or may  be corrupted (only in
windows).:-(
Note: I had installed in the browser the signer´s certificate.
Any help, please?
Thanks in advance.

----- Original Message -----
From: Barnes, Michael L. <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, February 24, 2000 5:53 PM
Subject: RE: Problem importing Certs in Netscape windows.


> that is how I do it, except I export the p12 with the -name "Some name"
> field.  I thought
> that was required for all netscape p12s but apparently not if it works
under
> linux.
>
> Mike
>
> -----Original Message-----
> From: Francisco Javier Martínez Martínez [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 24, 2000 4:36 AM
> To: [EMAIL PROTECTED]
> Subject: Problem importing Certs in Netscape windows.
>
>
>
> Hello.
> Recently I had setup a test CA.
> I had created and signed a few certificates with openssl, whichs can be
> imperted in PKCS12 format without problems into Linux Netscape, I had
tested
> encripted and signed emails succefully, but when I had tried to import the
> same certificates into Windows Netscape the system says: 'it can´t be
> imported because they are no valids certificates or may be corrupted'.
Some
> time ago I read that this could be something related with the headers of
the
> certificate in 'PEM' format that it expects that start with or without
> something.
> Anyone can told what I should to do or what is wrong.
> In outlook works fine.
>
> To generate the cliebnt certificates:
>
>  1. Genering private keys.
>
>                     # openssl genrsa -rand ./private/.rand.dat -des3 1024
>
> xxkey.pem
>
> 2. Genering CSR
>                     # openssl req -new -config openssl.cnf -key xxkey.pem
> -out xxreq.pem
>
>  3. Signing the CSR.
>
>                     # openssl ca -config openssl.cnf -in xxreq.pem -out
> xxcert.pem
>
>  4.1. Exporting in Netscape PKCS12 format.
>
>                     # openssl pkcs12 -export -in xxcert.pem -inkey
xxkey.pem
> -out xx.p12
>
>  4.2. Exporting MS Ootlook PKCS12 format.
>
>                     # openssl pkcs12 -export -in xxcert.pem -inkey
xxkey.pem
> -keysig -keyex -out xx.pfx
>
>
> Thanks in advance.
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]