liupeng wrote:
Hi,
  When I use nss-3.9 certutil tools import my base64-encoding cert in Linux
2.4.18-3.10.2smp,it crashed,does anybody know why
  My base64-encoding cert is here:
-----BEGIN CERTIFICATE-----
MIIDxzCCAzCgAwIBAgIEO5tELjANBgkqhkiG9w0BAQUFADBQMQswCQYDVQQGEwJV
[snip]
UDvAoPwCIfPWsQs=
-----END CERTIFICATE-----

I use the following command to import my cert,and the keydb password is 1234
./certutil -A -n AriesServerCert -t "CT,," -i cert.pem -f pwd -a -d .

Yes, this is a known bug in the NSS 3.9 utility programs that use the -a option for BASE 64 encoded input. It is only a bug in the utility programs, not in the NSS shared libraries. It has been fixed in the sources, and the fix will be in NSS 3.9.1.

In the meantime, you can workaround this bug as follows, using the NSS
utility command atob and a text editor.

using a text editor, created a file named cert.b64 that contains only the
base64 encoded part of cert.pem,  remove all lines down to and including
the BEGIN line, and remove the END line and all following lines.  Then

atob -i cert.b64 -o cert.der
certutil -A -n AriesServerCert -t "CT,," -i cert.der -d .

/Nelson

_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to