72005 - pk12util fails to import

Status: RESOLVED WORKSFORME

(NSS :: Libraries, defect, P1)

Description

[Julien Pierre]

Bob, this was reported against iWS 6.0

-------------------
iWS 6.0
build: 03/05/01
platform:all
-------------------

To reproduce:
pk12util -i ken.p12 -d /usr1/kenchan/ES6.0/server6/alias/ -P 
https-saab.red.iplanet.com-saab-
Enter Password or Pin for "NSS Certificate DB":
Enter password for PKCS12 file: 
Converted from:
6e 65 74 73 63 61 70 65  0 
Converted to:
 0 6e  0 65  0 74  0 73  0 63  0 61  0 70  0 65  0  0 
pk12util: PKCS12 decode validate bags failed.

Even Allow write permission to /tmp and move all db. database into /tmp 
directory

It still give me the warning:
pk12util: PKCS12 decode validate bags failed.

Comment 1

[Sonja Mirtitsch]

I have seen some other pk12util failures, but not this one  - could you please
provid the files and tell me which passwords were used so I can verify the failure?
We do not test pk12util with the -P option in the nightly tools tests

Comment 2

[Robert Relyea]

Julien. It looks like you are trying to import the cert back into the same
database it was exported as. This is supposed to fail.

I just tested the latest pk12util on the databases in  /u/kenchan/p12bug/ and
successfulling exported the cert and imported it into a new database.

bob

Comment 3

[Robert Relyea]

OK, I haven't been able to reproduce this exact problem.