Avatar for Username

Søg i Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Denne tråd blev arkiveret. Stil et nyt spørgsmål, hvis du har brug for hjælp.

How to export/extract a client certificate from FF mobile?

  • 1 svar
  • 1 har dette problem
  • 24 visninger
  • Seneste svar af tuxflo

tuxflo
tuxflo
more options

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command:

certutil -K -d sql:.

shows Something like:

certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID

Now I know that I must use pk12util to extract the key, but the command:

pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:.

Shows the following error:

pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library

Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command: certutil -K -d sql:. shows Something like: certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID Now I know that I must use pk12util to extract the key, but the command: pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:. Shows the following error: pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

Valgt løsning

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.

Læs dette svar i sammenhæng 👍 0

Alle svar (1)

tuxflo
tuxflo Spørgsmålsstiller
more options

Valgt løsning

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.