Kevin Lux wrote: > > Hi Group, > > I'm trying to make a PKCS12 envelope so I can import a private > key/certificate into internet explorer. > > The problem is after I run openssl I always get something in PKCS7? Here's > what I do. > > openssl pkcs12 -export -inkey mykey.key -in mycert.pem -out myp12.p12 > > Which creates myp12.p12 fine. > > However, when I view the file.. > [snip] > PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2048 > [snip] > And is obviously not importable by IE or Netscape.
Why do you say its obviously not importable? Have you tried to import it? You may have misunderstood the PKCS7 info mentioned with the -info option. PKCS#12 format contains various internal structures one of which is PKCS#7. So PKCS#12 *contains* PKCS#7 structures and the -info option is simply saying what type they are. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Gemplus: http://www.gemplus.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
