Hi Group,
I'm trying to make a PKCS12 envelope so I can import a private
key/certificate into internet explorer.
The problem is after I run openssl I always get something in PKCS7? Here's
what I do.
openssl pkcs12 -export -inkey mykey.key -in mycert.pem -out myp12.p12
Which creates myp12.p12 fine.
However, when I view the file..
---output---
[root@thebox ~]# openssl pkcs12 -in myp12.p12 -info
Enter Import Password:
MAC Iteration 2048
MAC verified OK
PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2048
Certificate bag
Bag Attributes
localKeyID: D8 24 8F A0 85 EB 06 98 4B 89 93 75 9C 90 4C 15 79 A3 41 9A
subject=<stuff>
issuer=<stuff>
-----BEGIN CERTIFICATE-----
MIIDkDCCAvmgAwIBAgICAKkwDQYJKoZIhvcNAQEEBQAwgY4xCzAJBgNVBAYTAlVT
<snip>
f2KSrw==
-----END CERTIFICATE-----
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048
Bag Attributes
localKeyID: D8 24 8F A0 85 EB 06 98 4B 89 93 75 9C 90 4C 15 79 A3 41
9A
Key Attributes: <No Attributes>
---end output---
And is obviously not importable by IE or Netscape. My private key is in
the format Proc-Type: 4,ENCRYPTED, DEK-Info: DES-EDE3-CBC,4FBAD868A6FF52E8
in PEM format, and my certificate is an X509, in PEM format. OpenSSL
v0.9.6a. Any ideas or pointers on what my be going on?
Thanks,
Kevin
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
