Re: [opencryptoki-users] Problems with TrouSerS PKCS#11 interface

[Joy M. L. <jml...@li...>]

Hi, 

On Thu, 2013-08-01 at 10:16 -0300, Eduardo Peixoto Macedo wrote:
> Hi,
> 
> I'm trying to import a certificate signed using the tpm engine
> (openssl-tpm-engine) into Firefox on Ubuntu 12.04.
> 
> I'm using Infineon TPM and I have already configured the tpm token
> with 'tpmtoken_init'. The PKCS#11 module (libopencryptoki.so) was
> successfully imported on Firefox. But when I try to import a
> certificate I get the following alert:
> 
> "Failed to decode the file.  Either it is not in PKCS #12 format, has
> been corrupted, or the password you entered was incorrect."
> 

So you are generating and signing the certificate in
openssl-tpm-engine...
How are you importing the certificate into tpm-token in opencryptoki?

> Here is the command that I am using to generate the certificate:
> 
> "openssl req -keyform engine
> -engine /usr/local/lib/openssl/engines/libtpm.so -key Authroity.key
> -x509 -out Authority.crt"
> 
> I tried to create another certificate using:
> 
> "openssl req -keyform engine
> -engine /usr/local/lib/openssl/engines/libtpm.so -key Client.key -new
> -out Client.csr"
> and:
> "openssl x509 -req -in Client.csr -CA Authority.crt -CAkey
> Authority.key -CAkeyform engine
> -engine /usr/local/lib/openssl/engines/libtpm.so -CAcreateserial -out
> Client.crt"
> 
> The keys "Authority.key" and "Client.key" were generated using
> "create_tpm_key".
> 
> 
> 
> 
> 
> But I get the alert when I try to import any of them.
> Am I doing something wrong?
> ------------------------------------------------------------------------------
> Get your SQL database under version control now!
> Version control is standard for application code, but databases havent 
> caught up. So what steps can you take to put your SQL databases under 
> version control? Why should you start doing it? Read more to find out.
> http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk
> _______________________________________________ opencryptoki-users mailing list ope...@li... https://lists.sourceforge.net/lists/listinfo/opencryptoki-users