Kaspar Brand wrote, On 2009-05-07 22:22: > Nelson B Bolyard wrote: >> Please provide a URL for the bugzilla bug that you filed. It was evidently >> filed in a different bugzilla than mozilla.org's. > > It's bug 491698, actually, and NSS's PKCS#12 decoder seems to have > a problem with it. The contents of the file can be listed with pk12util:
Kaspar, thanks for finding that bug report. I searched and searched through numerous bugzilla bug systems for it, without any luck. :( Anyway, It turns out that the particular PKCS#12 file has a private key and a certificate, but they do not complement each other. That is, the private key does not complement the public key in the certificate. They two keys have different moduli. That's why the import failed. The bug is that the import failed silently. There should have been an error message of some kind. It may be that other OSes are willing to import PKCS12 files with mismatched keys and certs, but that is not an objective of NSS or Firefox. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
