为提升您的使用体验,本站正在维护,部分功能暂时无法使用。如果本站文章无法解决您的问题,您想要向社区提问的话,请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问,我们的支持社区将会很快回复您的疑问。

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

How to Import a Certificate

  • 1 个回答
  • 2 人有此问题
  • 4 次查看
  • 最后回复者为 guigs

more options

I need to script the export of a cert from our Windows store into Firefox. I am having trouble getting the cert into the correct "container". The certificate, as generated from a command line as well, is a .pfx file with a password. I can manually import the cert into Firefox under the "Your Certificates" tab of the Certificate Manager. However, when I run the command line, it dumps the cert under the tab labeled "Others" and the website we're trying to access either can't find the cert there or there's a problem with the import itself.

My first couple of attempts failed with errors, but following up on them I found a site that suggested I convert the .pfx file to a .pem file. I followed those instructions and the command line no runs without error. The other thing to note here is using the GUI, I cannot import the .PEM file.

Assuming that the .pem file is encoded and formatted correctly, how can I get this line of code to put the cert into the right container?

certutil -A -n "My Certificate" -d c:\temp\CertImport -t "CTu,," -u "c" -a -f pword.txt -i CertEric.pem (I added the '-f' argument in case its needed to import the password protected file. I've run this both with and without it and got the same results.)

I also exported the cert in a .cer format. Here are some other attempts and results: certutil -A -n "My Certificate" -d c:\temp\CertImport -t "CTu,," -u "c" -a -f pword.txt -i CertEric.pfx certutil: could not obtain certificate from file: security library: improperly formatted DER-encoded message.

certutil -A -n "My Certificate" -d c:\temp\CertImport -t "CTu,," -u "c" -a -f pword.txt -i CertEric.cer certutil: could not obtain certificate from file: security library: improperly formatted DER-encoded message. (Although, dropping the '-a' argument allowed this command to complete without error.)

certutil -A -n "My Certificate" -d c:\temp\CertImport -t "CTu,," -u "c" -f pword.txt -i CertEric.pfx certutil: could not obtain certificate from file: security library: invalid arguments. (This one uses the .pfx file and drops the '-a' argument)

Any ideas? Thanks for your time.

Eric

I need to script the export of a cert from our Windows store into Firefox. I am having trouble getting the cert into the correct "container". The certificate, as generated from a command line as well, is a .pfx file with a password. I can manually import the cert into Firefox under the "Your Certificates" tab of the Certificate Manager. However, when I run the command line, it dumps the cert under the tab labeled "Others" and the website we're trying to access either can't find the cert there or there's a problem with the import itself. My first couple of attempts failed with errors, but following up on them I found a site that suggested I convert the .pfx file to a .pem file. I followed those instructions and the command line no runs without error. The other thing to note here is using the GUI, I cannot import the .PEM file. Assuming that the .pem file is encoded and formatted correctly, how can I get this line of code to put the cert into the right container? certutil -A -n "My Certificate" -d c:\temp\CertImport -t "CTu,," -u "c" -a -f pword.txt -i CertEric.pem (I added the '-f' argument in case its needed to import the password protected file. I've run this both with and without it and got the same results.) I also exported the cert in a .cer format. Here are some other attempts and results: certutil -A -n "My Certificate" -d c:\temp\CertImport -t "CTu,," -u "c" -a -f pword.txt -i CertEric.pfx certutil: could not obtain certificate from file: security library: improperly formatted DER-encoded message. certutil -A -n "My Certificate" -d c:\temp\CertImport -t "CTu,," -u "c" -a -f pword.txt -i CertEric.cer certutil: could not obtain certificate from file: security library: improperly formatted DER-encoded message. (Although, dropping the '-a' argument allowed this command to complete without error.) certutil -A -n "My Certificate" -d c:\temp\CertImport -t "CTu,," -u "c" -f pword.txt -i CertEric.pfx certutil: could not obtain certificate from file: security library: invalid arguments. (This one uses the .pfx file and drops the '-a' argument) Any ideas? Thanks for your time. Eric

所有回复 (1)

more options

Kesla, Thank you for elaborating on the description of your issue, however this may be beyond the scope of this support forum. The communities listed here: https://developer.mozilla.org/en-US/d.../NSS would be the best place to ask this question.

Sorry for the delay, and I hope this puts you in the right hands.