Guus Meijer wrote:
>
> Hi,
>
> I created certificates using MS certificate server as a CA on a IE5 browser
> (OS: W2K Pro). I exported the certificate and now I am trying to import them
> in Netscape running on W95. The *.pfx does not seem to be importable in
> Netscape so I used Openssl to 'change' the .pfx certificate into a .p12
> cert. This still doesn't work. As this is crucial in my application and I
> can't seem to find a resolution anywhere, this newsgroup is my last resort.
The format changed and Netscape 4.03 used "true" PFX (which was a
downright evil format) whereas after that everything used PKCS#12
(including things that claim to be PFX).
I wrote a utility that handles PFX (see homepage) ages ago for SSLeay
which it should be possible to port to OpenSSL.
Another possibility is copying the cert7.db and key3.db files from a
newer version of Netscape that understands PKCS#12. However the database
formats may not be compatible enough... perhaps someone else could
comment on that.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
