Hi there;
Since you have narrowed the problem down to something in your
certificate, and, since certificates are by nature 'public' files, can
you perhaps post the certificate from one of the failing PKCS#12 files
here, which would allow folks to perhaps help you out more?
(It may be that instead
> You need OpenSSL 1.0.0 at least to create PKCS#12 files without certificates,
> this should work:
> openssl pkcs12 -export -inkey key.pem -nocerts -out key.p12
Thank you Dr. Henson, I downloaded and installed openssl 1.0.0-beta4
and was able to successful create a private key only PKCS12
e you
sent... See _only_ the key...
Lou Picciano
- Original Message -
From: "Midori Green"
To: "Lou Picciano"
Sent: Friday, November 13, 2009 5:15:41 PM GMT -05:00 US/Canada Eastern
Subject: Re: PKCS12 import error into MacOSX keychain access
> Doing som
(I guess I don't see the 'Use Case')
Lou Picciano
- Original Message -
From: "Dr. Stephen Henson"
To: openssl-users@openssl.org
Sent: Friday, November 13, 2009 10:06:37 AM GMT -05:00 US/Canada Eastern
Subject: Re: PKCS12 import error into MacOSX keychain ac
On Fri, Nov 13, 2009, Midori Green wrote:
> Deae Lou and Dr. Henson:
>
> I would appreciate it, if Dr. Henson, you could examine the attached
> file, and see if it possible to determine if OpenSSL can do the reverse.
> (Take a existing RSA private key and create a PKCS12 file for it
> without an
To: openssl-users@openssl.org
Sent: Friday, November 13, 2009 12:31:48 AM GMT -05:00 US/Canada Eastern
Subject: Re: PKCS12 import error into MacOSX keychain access
Deae Lou and Dr. Henson:
Thank you again for e-mailing me with your assistance and suggestions,
it is greatly appreciated
> Might be this can help you to solve the issue: In the attached gif is
> the ASN.1 decoded content of the PFX (upper part) and the decrypted
> content of the pkcs8ShroudedKeyBag's octet string (lower part).
> A question regarding the Mac import attempt: Does the error occur
> before or after it as
Might be this can help you to solve the issue: In the attached gif is
the ASN.1 decoded content of the PFX (upper part) and the decrypted
content of the pkcs8ShroudedKeyBag's octet string (lower part).
A question regarding the Mac import attempt: Does the error occur
before or after it asks fo
Unlike PEM files, P12/PFX files are not base 64 encoded text files.
These directly have ASN.1 encoded content w/o line breaks.
On Thu November 12 2009, Michael S. Zick wrote:
> On Thu November 12 2009, Midori Green wrote:
> > On Thu, Nov 12, 2009 at 7:01 AM, PMHager wrote:
> > > Just a suggestion
Deae Lou and Dr. Henson:
Thank you again for e-mailing me with your assistance and suggestions,
it is greatly appreciated.
I have tried both your suggestions, and specifically used the following
commands:
openssl pkcs12 -export -clcerts -inkey midori.key -in midori.cert \
-nomaci
Midori -
Have been following this thread with some interest, as we generate PKCS12 certs
commonly for use on Macs (work equally well on Windows, without issue). Will be
happy to work through it with you, offering any help we can.
We also are producing 2048-bit RSA keys to begin with, generate
On Thu, Nov 12, 2009, Midori Green wrote:
> I have been trying unsuccessfully to import a PKCS12 file created by openssl
> into the "keychain access" application for MacOSX. When I do, I always get
> the error: CSSMERR_CL_UNKNOWN_FORMAT
>
> Please note the following:
>
> * 2048 bit rsa private
On Thu November 12 2009, Midori Green wrote:
> On Thu, Nov 12, 2009 at 7:01 AM, PMHager wrote:
> > Just a suggestion which does not consume much time:
> > The .P12 (or .PFX) formats from OpenSSL and Windows
> > are slightly different. To convert between the two,
> > just import the P12 into the MS
On Thu, Nov 12, 2009 at 7:01 AM, PMHager wrote:
> Just a suggestion which does not consume much time:
> The .P12 (or .PFX) formats from OpenSSL and Windows
> are slightly different. To convert between the two,
> just import the P12 into the MS CertStore "My" and
> locate and export the certificate
Just a suggestion which does not consume much time:
The .P12 (or .PFX) formats from OpenSSL and Windows
are slightly different. To convert between the two,
just import the P12 into the MS CertStore "My" and
locate and export the certificate with its private
key from that list:
%SystemRoot%\sy
15 matches
Mail list logo
