Hello allan,

Just a (possible silly) question :
Have you try to export your certificate with a Mozilla browser (mozilla or firefox) ?
Alternatively, have you check for the paranoid rules in the IE security tabs ?



Best regards, J.L.

allan juul wrote:

hello

beeing new to openssl (as well as ssl) here's a couple of naive questions.

i have a (perl)script in which i need to log on into a digital signature
protected website. the script can do it with a pkcs12 certificate, but
now i wish to do it with my default certificate which was installed
directly into MSIE.

Apparenly when i installed this certificate way back i have done this
with the private key marked as *not-exportable*, so when i now try to
export [via the MSIE export wizard] a copy of the certificate i only get
the "No, do not export the private key" option. which then results in a
DER (or base64) encoded option.

my problem is that i cannot log into the website via the script with
this kind of certificate i guess because the private key is missing.

1) i guess its pretty obvious, but is it correct that it is _not_
possible to make a pkcs12 copy of the certificate when the private key
is not-exportable ?

2) since the browser (MSIE) can be used to log in to this website i
reckon a script using the same certificate should be able to do the
same. but how do i use the certificate in a script, when the
certificates private key is protected as non-exportable ?


many thanks

./allan

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]


--
Jean-Luc Pinardon                          TCL&ALCATEL Mobile Phones MTD
Change & Configuration Management          165, Boulevard de Valmy
mailto:[EMAIL PROTECTED]    92707 Colombes Cedex
Phone : +33 1 55 66 77 54                  France
Fax : +33 1 55 66 33 37


______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Reply via email to