Avatar for Username

Поиск в Поддержке

Избегайте мошенников, выдающих себя за службу поддержки. Мы никогда не попросим вас позвонить, отправить текстовое сообщение или поделиться личной информацией. Сообщайте о подозрительной активности, используя функцию «Пожаловаться».

Подробнее

Эта тема была архивирована. Если вам нужна помощь, задайте новый вопрос.

How to export/extract a client certificate from FF mobile?

  • 1 ответ
  • 1 имеет эту проблему
  • 15 просмотров
  • Последний ответ от tuxflo

tuxflo
tuxflo
more options

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command:

certutil -K -d sql:.

shows Something like:

certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID

Now I know that I must use pk12util to extract the key, but the command:

pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:.

Shows the following error:

pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library

Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command: certutil -K -d sql:. shows Something like: certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID Now I know that I must use pk12util to extract the key, but the command: pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:. Shows the following error: pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

Выбранное решение

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.

Прочитайте этот ответ в контексте 👍 0

Все ответы (1)

tuxflo
tuxflo Задавший вопрос
more options

Выбранное решение

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.