Am Dienstag, 19. September 2006 17:29 schrieb Kim Nilsson:
> According to the SE support the cert needs to be in
x.509 .der format.
> This means I should be able to import the CAcert root
cert.
> But, what about client certs? It seems I should be able
to insert such
> certs too. There is a, now empty, list for Client
Certs, alongside the
> "Trusted issuers", where I intend to put
the root cert, if it lets me.
Usually, you first have to import the root certificate,
afterwards you can
load client certs.
> The problem is, I don't have a clue how to create a
client cert in .der
> format. Everything I try to Backup (export) from
> Firefox/Thunderbird/Seamonkey ends up as .P12 files.
The problem is that you also need the secret key for it, not
just the cert.
And PKCS#12 (.p12, .pfx) is the usual transfer format for
certificate+secret
key packages.
You can extract the certificate from a backup, and encode it
in .der format
with the openssl tool on the commandline:
openssl pkcs12 -clcerts -in backup.p12 -nodes -out cert.pem
openssl x509 -in cert.pem -out cert.der -outform der
Best regards,
Philipp Gühring
_______________________________________________
Have you subscribed to our RSS News Feed yet?
CAcert-Support mailing list
CAcert-Support lists.cacert.org
http://lists.cacert.org/cgi-bin/mailman/listinfo/
cacert-support
|