Re: PKCS12 import error into MacOSX keychain access

2009-11-13 Thread Patrick Patterson
Hi there; Since you have narrowed the problem down to something in your certificate, and, since certificates are by nature 'public' files, can you perhaps post the certificate from one of the failing PKCS#12 files here, which would allow folks to perhaps help you out more? (It may be that instead

Re: PKCS12 import error into MacOSX keychain access

2009-11-13 Thread Midori Green
> You need OpenSSL 1.0.0 at least to create PKCS#12 files without certificates, > this should work: > openssl pkcs12 -export -inkey key.pem -nocerts -out key.p12 Thank you Dr. Henson, I downloaded and installed openssl 1.0.0-beta4 and was able to successful create a private key only PKCS12

Re: PKCS12 import error into MacOSX keychain access

2009-11-13 Thread Lou Picciano
e you sent... See _only_ the key... Lou Picciano - Original Message - From: "Midori Green" To: "Lou Picciano" Sent: Friday, November 13, 2009 5:15:41 PM GMT -05:00 US/Canada Eastern Subject: Re: PKCS12 import error into MacOSX keychain access > Doing som

Re: PKCS12 import error into MacOSX keychain access

2009-11-13 Thread Lou Picciano
(I guess I don't see the 'Use Case') Lou Picciano - Original Message - From: "Dr. Stephen Henson" To: openssl-users@openssl.org Sent: Friday, November 13, 2009 10:06:37 AM GMT -05:00 US/Canada Eastern Subject: Re: PKCS12 import error into MacOSX keychain ac

Re: PKCS12 import error into MacOSX keychain access

2009-11-13 Thread Dr. Stephen Henson
On Fri, Nov 13, 2009, Midori Green wrote: > Deae Lou and Dr. Henson: > > I would appreciate it, if Dr. Henson, you could examine the attached > file, and see if it possible to determine if OpenSSL can do the reverse. > (Take a existing RSA private key and create a PKCS12 file for it > without an

Re: PKCS12 import error into MacOSX keychain access

2009-11-13 Thread Lou Picciano
To: openssl-users@openssl.org Sent: Friday, November 13, 2009 12:31:48 AM GMT -05:00 US/Canada Eastern Subject: Re: PKCS12 import error into MacOSX keychain access Deae Lou and Dr. Henson: Thank you again for e-mailing me with your assistance and suggestions, it is greatly appreciated

Re: PKCS12 import error into MacOSX keychain access

2009-11-13 Thread Midori Green
> Might be this can help you to solve the issue: In the attached gif is > the ASN.1 decoded content of the PFX (upper part) and the decrypted > content of the pkcs8ShroudedKeyBag's octet string (lower part). > A question regarding the Mac import attempt: Does the error occur > before or after it as

RE: PKCS12 import error into MacOSX keychain access

2009-11-13 Thread PMHager
Might be this can help you to solve the issue: In the attached gif is the ASN.1 decoded content of the PFX (upper part) and the decrypted content of the pkcs8ShroudedKeyBag's octet string (lower part). A question regarding the Mac import attempt: Does the error occur before or after it asks fo

RE: PKCS12 import error into MacOSX keychain access

2009-11-13 Thread PMHager
Unlike PEM files, P12/PFX files are not base 64 encoded text files. These directly have ASN.1 encoded content w/o line breaks. On Thu November 12 2009, Michael S. Zick wrote: > On Thu November 12 2009, Midori Green wrote: > > On Thu, Nov 12, 2009 at 7:01 AM, PMHager wrote: > > > Just a suggestion

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Midori Green
Deae Lou and Dr. Henson: Thank you again for e-mailing me with your assistance and suggestions, it is greatly appreciated. I have tried both your suggestions, and specifically used the following commands: openssl pkcs12 -export -clcerts -inkey midori.key -in midori.cert \ -nomaci

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Lou Picciano
ursday, November 12, 2009 2:33:43 AM GMT -05:00 US/Canada Eastern Subject: PKCS12 import error into MacOSX keychain access I have been trying unsuccessfully to import a PKCS12 file created by openssl into the "keychain access" application for MacOSX. When I do, I always get the error:

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Dr. Stephen Henson
On Thu, Nov 12, 2009, Midori Green wrote: > I have been trying unsuccessfully to import a PKCS12 file created by openssl > into the "keychain access" application for MacOSX. When I do, I always get > the error: CSSMERR_CL_UNKNOWN_FORMAT > > Please note the following: > > * 2048 bit rsa private

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Michael S. Zick
On Thu November 12 2009, Midori Green wrote: > On Thu, Nov 12, 2009 at 7:01 AM, PMHager wrote: > > Just a suggestion which does not consume much time: > > The .P12 (or .PFX) formats from OpenSSL and Windows > > are slightly different. To convert between the two, > > just import the P12 into the MS

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Midori Green
On Thu, Nov 12, 2009 at 7:01 AM, PMHager wrote: > Just a suggestion which does not consume much time: > The .P12 (or .PFX) formats from OpenSSL and Windows > are slightly different. To convert between the two, > just import the P12 into the MS CertStore "My" and > locate and export the certificate

RE: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread PMHager
hursday, November 12, 2009 8:34 AM To: openssl-users@openssl.org Subject: PKCS12 import error into MacOSX keychain access I have been trying unsuccessfully to import a PKCS12 file created by openssl into the "keychain access" application for MacOSX. When I do, I always get the error: CSS

PKCS12 import error into MacOSX keychain access

2009-11-11 Thread Midori Green
I have been trying unsuccessfully to import a PKCS12 file created by openssl into the "keychain access" application for MacOSX. When I do, I always get the error: CSSMERR_CL_UNKNOWN_FORMAT Please note the following: * 2048 bit rsa private key, PEM encoded and encrypted with 3DES, and vie