Re: Passwords for S/MIME certs?

2007-07-25 Thread nobody
On Mon, 23 Jul 2007 13:49:21 -0700 David Schwartz [EMAIL PROTECTED] wrote: Decrypting mail requires the private key. The certificate is not needed for this purpose. The PKCS12 format provides the ability to include a collection of keys and certificates and provides a way to encrypt them.

RE: Passwords for S/MIME certs?

2007-07-25 Thread David Schwartz
Thanks very much, I'm starting to understand this. One last question: what's the difference between the export password and the password that the system asks for when creating a key for which -des3 was specified? Why doesn't the export just inherit/use the key encryption password? This is

Re: Passwords for S/MIME certs?

2007-07-25 Thread nobody
On Mon, 23 Jul 2007 23:31:03 +0200 Dr. Stephen Henson [EMAIL PROTECTED] wrote: Hi, this doesn't seem to be happening. Doesn't the client need a password to decrypt the private key or does the export create the private key in cleartext? I can use the key without ever giving a password in

Re: Passwords for S/MIME certs?

2007-07-25 Thread nobody
On Wed, 25 Jul 2007 06:19:53 -0700 David Schwartz [EMAIL PROTECTED] wrote: Thanks very much, I'm starting to understand this. One last question: what's the difference between the export password and the password that the system asks for when creating a key for which -des3 was specified?

Re: Passwords for S/MIME certs?

2007-07-23 Thread nobody
On Sun, 22 Jul 2007 14:08:31 -0700 David Schwartz [EMAIL PROTECTED] wrote: Hi, I see this option when I import but I don't understand something more fundamental. Why doesn't the cert itself have any password protection? Is it because when I created it I specified the key password only

Re: Passwords for S/MIME certs?

2007-07-23 Thread nobody
On Sun, 22 Jul 2007 17:32:04 +0200 Goetz Babin-Ebell [EMAIL PROTECTED] wrote: Hello, --On Juli 22, 2007 14:22:42 + nobody [EMAIL PROTECTED] wrote: On Fri, 20 Jul 2007 21:38:47 +0200 Goetz Babin-Ebell [EMAIL PROTECTED] wrote: --On Freitag, Juli 20, 2007 14:49:54 + nobody

Re: Passwords for S/MIME certs?

2007-07-23 Thread Dr. Stephen Henson
On Mon, Jul 23, 2007, nobody wrote: That isn't happening. I did create a password-protected private key and none of the email clients ask for the password when using it. Clients typically ask you for the password when they import the PKCS#12 file. They use that to decrypt the key and store

Re: Passwords for S/MIME certs?

2007-07-23 Thread nobody
On Mon, 23 Jul 2007 15:21:09 +0200 Dr. Stephen Henson [EMAIL PROTECTED] wrote: On Mon, Jul 23, 2007, nobody wrote: That isn't happening. I did create a password-protected private key and none of the email clients ask for the password when using it. Clients typically ask you for

RE: Passwords for S/MIME certs?

2007-07-23 Thread David Schwartz
The pkcs12 export command seems to want both the certificate and the private key to be able to create a certificate containing the private key which the key owner can use to verify signatures and decrypt mail signed and encrypted using his public key. Decrypting mail requires the private

Re: Passwords for S/MIME certs?

2007-07-23 Thread Dr. Stephen Henson
On Mon, Jul 23, 2007, nobody wrote: On Mon, 23 Jul 2007 15:21:09 +0200 Dr. Stephen Henson [EMAIL PROTECTED] wrote: On Mon, Jul 23, 2007, nobody wrote: That isn't happening. I did create a password-protected private key and none of the email clients ask for the password when

Re: Passwords for S/MIME certs?

2007-07-22 Thread nobody
On Fri, 20 Jul 2007 21:38:47 +0200 Goetz Babin-Ebell [EMAIL PROTECTED] wrote: Hello, --On Freitag, Juli 20, 2007 14:49:54 + nobody [EMAIL PROTECTED] wrote: [...] Then I exported it in pkcs12 format and imported it into Internet Explorer and Thunderbird. I've sent encrypted and

Re: Passwords for S/MIME certs?

2007-07-22 Thread nobody
On Sat, 21 Jul 2007 00:25:54 +0200 Dr. Stephen Henson [EMAIL PROTECTED] wrote: On Fri, Jul 20, 2007, Goetz Babin-Ebell wrote: Hello, --On Freitag, Juli 20, 2007 14:49:54 + nobody [EMAIL PROTECTED] wrote: [...] Then I exported it in pkcs12 format and imported it into

Re: Passwords for S/MIME certs?

2007-07-22 Thread Goetz Babin-Ebell
Hello, --On Juli 22, 2007 14:22:42 + nobody [EMAIL PROTECTED] wrote: On Fri, 20 Jul 2007 21:38:47 +0200 Goetz Babin-Ebell [EMAIL PROTECTED] wrote: --On Freitag, Juli 20, 2007 14:49:54 + nobody [EMAIL PROTECTED] wrote: [...] Then I exported it in pkcs12 format and imported it into

RE: Passwords for S/MIME certs?

2007-07-22 Thread David Schwartz
Hi, I see this option when I import but I don't understand something more fundamental. Why doesn't the cert itself have any password protection? Is it because when I created it I specified the key password only to build the cert from the key? And the cert gets built with no protection?

Re: Passwords for S/MIME certs?

2007-07-20 Thread Goetz Babin-Ebell
Hello, --On Freitag, Juli 20, 2007 14:49:54 + nobody [EMAIL PROTECTED] wrote: [...] Then I exported it in pkcs12 format and imported it into Internet Explorer and Thunderbird. I've sent encrypted and signed mails with Thunderbird and Outlook, they verify and decrypt fine at the other end

Re: Passwords for S/MIME certs?

2007-07-20 Thread Dr. Stephen Henson
On Fri, Jul 20, 2007, Goetz Babin-Ebell wrote: Hello, --On Freitag, Juli 20, 2007 14:49:54 + nobody [EMAIL PROTECTED] wrote: [...] Then I exported it in pkcs12 format and imported it into Internet Explorer and Thunderbird. I've sent encrypted and signed mails with Thunderbird and