[Help-gnutls] Re: Include CA certificate in PKCS12

[Simon Josefsson]

Sascha Ziemann <sascha.ziemann at secunet.com> writes:

> Simon Josefsson schrieb:
>> Hi!  Right now this isn't possible, but I implemented support for this
>> in CVS.  I haven't tested the resulting PKCS#12 blob with anything, so
>> I don't know exactly what various programs expect.  Unfortunately,
>> there are many ways to store multiple certificates in a PKCS#12
>> file...  Please let me know if/how it works for you.
> Thanks! I tried todays snapshot. It works fine with Internet Explorer 6.
> I was able to import all certificates of the certification path at once.
> But it does not work with Firefox 2.0.0.1. Maybe Firefox is not able to
> import CA certificates from PKCS12 files. I will try to figure this out.

Try changing the order of the certificates in the file, that may
matter...  Otherwise, you'll simply have to debug Firefox why it
doesn't work.  PKCS#12 interoperability is a mess.

/Simon