Re: PKCS12 and private keys

2002-07-25 Thread Chris Jarshant
Erwann ABALEA wrote: > > friendlyName, then look for their public key cert using that friendlyName, > > then look for a corresponding private key using the friendlyName. If I > > can't find a private key with that friendlyName, I use the localKeyID from > > the public key cert to match. If th

Re: PKCS12 and private keys

2002-07-25 Thread Aleix Conchillo
On Thu, 25 Jul 2002 17:33:49 +0200 (CEST), Erwann ABALEA wrote: > > How is that localKeyID calculated? Is it a hash of the public key? If > yes, then this sounds an acceptable practice, if you really *need* to > keep separate PKCS#12 files, which is uncommon. > it's a digest of the x509 certif

Re: PKCS12 and private keys

2002-07-25 Thread Erwann ABALEA
On Thu, 25 Jul 2002, Chris Jarshant wrote: [...] > Also, my app will support multiple keys/certs in a variety of places. For > example, > the public key cert for user X is in one PKCS12-format file, and the > corresponding private key is in a separate PKCS12-format file. Are there > any offici

Re: PKCS12 and private keys

2002-07-25 Thread Chris Jarshant
Chris Jarshant wrote: > Erwann ABALEA wrote: > > > Probably a limitation of the actual browsers. But you might want to check > > Mozilla 1.0, which seems to be able to save a bunch of private > > key/certificate pairs at once. I haven't tested this functionality, but it > > might be possible th

Re: PKCS12 and private keys

2002-07-25 Thread Chris Jarshant
Erwann ABALEA wrote: > Probably a limitation of the actual browsers. But you might want to check > Mozilla 1.0, which seems to be able to save a bunch of private > key/certificate pairs at once. I haven't tested this functionality, but it > might be possible that there's only one output file, and