Yup, I tried importing them. IE & Netscape whines and says they are invalid. I'm still digging.
I'm probably missing something really dumb :) Kevin On Thu, 7 Feb 2002, Dr S N Henson wrote: > Kevin Lux wrote: > > > > Hi Group, > > > > I'm trying to make a PKCS12 envelope so I can import a private > > key/certificate into internet explorer. > > > > The problem is after I run openssl I always get something in PKCS7? Here's > > what I do. > > > > openssl pkcs12 -export -inkey mykey.key -in mycert.pem -out myp12.p12 > > > > Which creates myp12.p12 fine. > > > > However, when I view the file.. > > > [snip] > > PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2048 > > > [snip] > > And is obviously not importable by IE or Netscape. > > Why do you say its obviously not importable? Have you tried to import > it? > > You may have misunderstood the PKCS7 info mentioned with the -info > option. PKCS#12 format contains various internal structures one of which > is PKCS#7. So PKCS#12 *contains* PKCS#7 structures and the -info option > is simply saying what type they are. > > Steve. > -- > Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ > Personal Email: [EMAIL PROTECTED] > Senior crypto engineer, Gemplus: http://www.gemplus.com/ > Core developer of the OpenSSL project: http://www.openssl.org/ > Business Email: [EMAIL PROTECTED] PGP key: via homepage. > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
