Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Natao arisiva ity resaka mitohy ity. Mametraha fanontaniana azafady raha mila fanampiana.

How to export/extract a client certificate from FF mobile?

  • 1 valiny
  • 1 manana an'ity olana ity
  • 2 views
  • Valiny farany nomen'i tuxflo

tuxflo
tuxflo
more options

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command:

certutil -K -d sql:.

shows Something like:

certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID

Now I know that I must use pk12util to extract the key, but the command:

pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:.

Shows the following error:

pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library

Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command: certutil -K -d sql:. shows Something like: certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID Now I know that I must use pk12util to extract the key, but the command: pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:. Shows the following error: pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

Vahaolana nofidina

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.

Hamaky an'ity valiny ity @ sehatra 👍 0

All Replies (1)

tuxflo
tuxflo Tompon'ny fanontaniana
more options

Vahaolana Nofidina

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.