David Stutzman wrote:
I created a new security database with modutil, added a root module to it and then attempted to generate a key using certutil and received an I/O error:

# certutil -G -k rsa -g 1024 -d .
certutil: unable to generate key(s)
: An I/O error occurred during security authorization.
Probably not the best error message for this case. Something like token or db unitializes would probably be better. The error problem could either be in softoken, or the mapping of PKCS-11 errors to NSS errors, or both.

I took a guess at the problem and set a password for the db using:
# modutil -changepw "NSS Certificate DB" -dbdir .

and then it worked fine.

Is this something that's fine the way it is or would you prefer (is it possible) to have it actually say the password is the problem?
use certutil -N -d . to create your database and it will be initialized correctly. You can supply the empty string for the password.

Dave
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to