Join the Mozilla’s Test Days event from Dec 2–8 to test the new Firefox address bar on Firefox Beta 134 and get a chance to win Mozilla swag vouchers! 🎁

Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

How to export/extract a client certificate from FF mobile?

  • 1 回覆
  • 1 有這個問題
  • 15 次檢視
  • 最近回覆由 tuxflo

tuxflo
tuxflo
more options

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command:

certutil -K -d sql:.

shows Something like:

certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID

Now I know that I must use pk12util to extract the key, but the command:

pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:.

Shows the following error:

pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library

Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command: certutil -K -d sql:. shows Something like: certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID Now I know that I must use pk12util to extract the key, but the command: pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:. Shows the following error: pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

被選擇的解決方法

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.

從原來的回覆中察看解決方案 👍 0

所有回覆 (1)

tuxflo
tuxflo 提出問題者
more options

選擇的解決方法

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.