Re: pk12util: no user certs from given nickname

Hubert Kario <[email protected]> Mon, 23 Jan 2017 12:16:15 +0100
Newsgroups	gmane.comp.mozilla.crypto
Message-ID	<[email protected]>
On Friday, 20 January 2017 19:14:08 CET Yao, Julie wrote:
> certutil –L –d config/nssdb 
> 
> Certificate Nickname                                         Trust
> Attributes
> SSL,S/MIME,JAR/XPI 
> juliek12                                                     Cu,Cu,Cu
> juliek1                                                      Cu,Cu,Cu
> soneraclass2ca                                               CT,,
> 
> pk12util -o /tmp/exportfile.pkcs12 -W changeit -d config/nssdb/ -K changeit
> –n soneraclass2ca
> pk12util: no user certs from given nickname
> 
> If the alias is key, pk12util works fine. It fails in certs.


it does look like the pk12util does not support exporting just the 
certificate, if you'd like this feature, I suggest opening a bugzilla feature 
request

for exporting just certificates, you can use certutil -L with either -r or -a

the resulting PEM or DER file can be converted to PKCS#12 file with `openssl 
pkcs12` utility
 
> 
> -----Original Message-----
> From: Hubert Kario [mailto:[email protected]] 
> Sent: Friday, January 20, 2017 7:11 AM
> To: [email protected]
> Cc: Yao, Julie <[email protected]>
> Subject: Re: pk12util: no user certs from given nickname
> 
> On Thursday, 19 January 2017 19:51:59 CET Yao, Julie wrote:
> 
> > When I ran certutil to list certs/keys in my nssdb, it showed a couple 
> > of certificates in the db. But when I tried to use pk12util to export 
> > one of the certificates, I got: pk12util: no user certs from given 
> > nickname
> 
> 
> can you provide exact commands and their outputs you have used?
> 
> 
> --
> Regards,
> Hubert Kario
> Senior Quality Engineer, QE BaseOS Security team
> Web: www.cz.redhat.com
> Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic


-- 
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic

-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto
signature.asc (application/pgp-signature, 819 B)