Hello,

    We are multiple developpers working on the same project
    requirering signed scripts.

    in order to deploy signing certs, I followed the
    http://books.mozdev.org/html/mozilla-chp-12-sect-5.html
    instructions.

    creating base, root cert, distro cert and signing cert,
    then signing app, works.

    But as proposed, I then want to export signing cert and
    import it to another database:

    certutil -L -d . -n "certs.myorg.org/signing" -a -o myself.cacert

    and,

    certutil -N -d new_db
certutil -A -n "certs.myorg.org/signing" -t ",,C" -i myself.cacert -d new_db


    Then, signing with that new db fails:
signtool -d new_db -k "certs.myorg.org/signing" -Z secure.jar secure-dir/


    +---------------------------------------------------+
    | warning - can't find private key for this cert    |
    | signtool: PROBLEM signing data (Unknown issuer)   |
    | the tree "secure-dir" was NOT SUCCESSFULLY SIGNED |
    +---------------------------------------------------+



how should I import a private key in the signing cert distribution process ?


thanks for your answers.
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to