Cannot import my certificate in firefox

I import my certificate in firefox from Preferences->Advanced->Certificates->View certificates->Import, it seems to work and I get the message "Your personal certificate has been installed. You should keep a backup copy of this certificate". However, afterwards my certificate is not in the list of certificates. How can I import it? Using firefox 34.0.5 on mac OSX 10.9.5.

Hi guigs2,
Thank you for the suggestion. Unfortunately the first module does not compile (got an error when running make: "In file included from quickder.c:11:
./secasn1.h:15:10: fatal error: 'plarena.h' file not found").
The links to the second module are broken.
I have to say my problem is only in firefox for mac, while I am able to import my certificate in firefox in Ubuntu.

Similar Messages

Not able to import others certificate in firefox

dear all
i have to change my plateform from windows to linux. i am working on security programming. even i find it tough to do simple stuffs. i am using fedora linux and firefox browser. i am trying to install others certificat. i am not able to do so. its giving me error. i had already imported the root CA certificate and the CA certificate successfully.
error:
the certificate can't be verified and will not be imported. the certificate issuer might be unknown or untrusted, the certificate might have expired, or been revoked, or the certificate might not have been approved.
could any body give me some idea about all these simple issues. it will be very helpful if u could give me any link from where i can get some relevant materials.
thanks
ajkr
Message was edited by:
ajkr
Message was edited by:
ajkr

If you already have the CA certificate chain in your cert8.db, then you need to make sure that the CA certs are trusted. If the trust settings are missing, then your end-entity cert will not get verified successfully. Use Firefox to change the trust settings on the CA certs and try the operation again.

E61 cannot import personal certificate

Hello,
I can't import personal certificate. I have personal certificate in p12 (pkcs12) format and it can be imported into firefox without any issues. However when I open this certificate on E61 I am asked for:
password for my certificate - I enter correct one
E61 proceeds to to Screen where it says:
File contains:
1 private key
1 personal certificate
1 authority certificate
Save? When I click on save I get message:
Private key corrupted!
then it proceeds to CA which works fine.
What I am doing wrong? Kindly assist as this is show stopper in 170K+ employees company.

Hi,
I'm not only unlucky, I'm frustrated! :-(
I've got exactly the same problem. Modell: E65.
In our company around 50000 users are already using personal certificates, generated using an openssl pki framework.
Installing/migrating/running a Windows-PKI instead, only for importing P12-Files into our Nokia mobile's is not a solution nor an option.
All our user-certificates (Server-,Client-,Multi-Level-CA-Certificates) are working fine within standard-protocols and standard applications (e.g. IMAPS, VPN/IPSec, WPA-EAP-TTLS/TLS, HTTPS, LDAPs,...), even within Microsoft's client-appilcations (IE / Outlook) there are no problems importing / using them for encryption, authentication or signing purposes.
So there should be no problem, regarding the import into a E65?!
I tried to convert some demo-certificates various ways, exported, converted them to DER, build different P12-formated files but not chance: the E65 always reports "File corrupted".
I also followed the instruction found under
https://blogs.forum.nokia.com/view_entry.html?id=412
So I tried to download a p12-Container directly from a test-webserver using the correct mime-type, no luck: Corrupted File!
But on the other hand, any p12-file, which the E65 says is corrupted, could be imported into IE/Firefox/Outlook/Thunderbird (the later two on windows & linux plattforms) or opened/investigated using openssl (0.9.8c and 0.9.8d) on the command line without any problems.
The hint (two posts above), creating certificates using MS-AD-integrated PKI gave me a small hope again. (Please do not understand me wrong, migrating all our user/server certs and PKI-Infrastructure to MS is completly impossible, but a small test will show whether out p12-Files cause the corruption problems).
So I imported (doubleclick, windows wizard...) the openssl-generated p12 into IE (flagged "exportable") without problems. Right after the import, I exported it various ways (e.g. w/o stong encryption) into a MS-pfx (aka p12) formated file. Renamed the suffix from pfx to p12 and gave it to openssl for processing / investigation:
openssl pkcs12 -in testuser.p12 -info
Enter Import Password:
MAC Iteration 2000
MAC verified OK
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2000
Bag Attributes
localKeyID: 01 00 00 00
friendlyName: {EE88EF5C-5404-487C-AB22-AA56E79D447C}
Microsoft CSP Name: Microsoft Enhanced Cryptographic Provider v1.0
Key Attributes
X509v3 Key Usage: 10
Ok the content seems to be in "Microsoft CSP" format!!! (remembering two posts earlier, that's the container-format MS-PKI produces, so a successfull import of this file should be possible?!.... No way either!!! "File corrupted!"
Another point: during my first p12 import try I used a corporate-standard-p12 file, that means, it contains:
1 x User-Cert
1 x User-Key
1 x Intermediate-level-CA-Cert
1 x Root-level-CA-Cert
The E65 successfully imported the two CA-Certs, ask for a name and stored them under "Authorities". They are accessible within S60 (Security->certif.manag) and anything is fine with them. But the also contained user-certificate and the user-key resulted in "File Corrupted!". :-(
So, for me in the moment it looks really that there is a bug in S60-3rdEd. (E65). Our certificate-containers are as far as I can say completly standard conform all software (opensource/closed source) can read/import our p12-contents without problems, even the E65 can partialy (CA-Certs) read the p12 contents (but not the user-cert/key). :-(
I would be very happy if someone else can confirm the above results and even more happy if someone else can give me more ideas where to look for a possible solution.
What I'm missing is an exact specification from Nokia/Symbian, regarding the P12 contents. That means, Certificate/Key Encryption, Formats, Hash-Algorithms, Iterators, Mac-Iterators, and so on... If such an specification would be available/accessible chances are good to be able to generate a valid p12 file containing importable private keys. Information like DER/PEM and mime-type that's by far not enough.
Because I was not able to find such details specs, all I can offer in the moment is to generate test certificates and p12-container-files for further in-deep debugging?!
If it is not a bug of S60-3rdEd. perhaps someone else reading this thread can offer a MS-PKI-generated (and of course successfully imported ins S60) p12-File (even revoked should not be a problem) with all passphrases for download, so I can try to investigate in deep the formats and the differences?
Many thanks for your help!
Cheers
Krum

How can I import personal certificates into firefox that are not pkcs12 files (.cer or other)?

I am trying to import .cer personal certificat into mozzila so I can go to an secure site (bank account online) but cannot do it since it is not pkcs12 type of file. Can you help me.

I tied that, but when I try to import them to mozzila all it wants are pkcs12 files. It does not accept any other.

How can I import security certificates from Explorer to Firefox?

I deleted several certificates before I decided it was a bad idea - too late ... many of my frequently visited sites won't validate at all or, will come up in plain text vs. html. Those sites still work in Explorer so, logic says I could import trusted certificates.

You need to export the certificates in IE and import them in the Firefox Certificate Manager.
*Firefox/Tools > Options > Advanced > Certificates: View Certificates

Cannot import certificate

Hey,
I've purchased a domain and a SSL certificate from Comodo but I cannot import it via the server app. The certificate consist of 5 files but the window where i'm supose to drag files doesn't seem to do anything - the import button is still grayed out after dragging the files in. I guess that it needs some .key file which i do not have. I'm new to this so i'm not sure what am I suppose to do.
Any help would be appreciated.
P.S. And how can I delete the "self signed" from the server and start everything from clean so to speak?

Ferry Gunawan
good to hear it. Please close this thread if your issue has been resolved.How to close a discussion and why
Regards,
JK

How do I install (import) certificat into FireFox using commad line?

I can import certificat using certutil.exe in command line, but this certificat is available only in Internet Explorer.
I can import certyficat into FireFox using its GUI. I must import that certificat on more then 60 PCs.
Question is: how do I install (import) certificat into FireFox using commad line?

HI ScanBit,
Thank you for your question, in order to import the certificate in the command line you will need these resources:
*[https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil]
If you have any other questions about this, we are happy to help.

Firefox 15.0.1 cannot import bookmarks from Safari 6.0.1

Hello,
Firefox 15.0.1 cannot import bookmarks from Safari 6.0.1.
I have followed the steps below:
1) Export all Safari bookmarks to an HTML file (File --> Export Bookmarks)
2) Import bookmarks into Firefox (Bookmarks --> Show all bookmarks --> Import and Backup --> Import Bookmarks from HTML)
Firefox seems to load the HTML file, but the bookmarks never show up in Firefox.
Any thoughts about why this is happening?
Best,
Jaime.-

'''Could the GEEKS at Firefox made such a simple request MORE COMPLICATED? I am using FF 18 and it is more complicated than
any other browser...is this GEEK"S revenge again?'''

"Cannot import certificate response" for SSL in STRUSTSSO2

Hi
I have got an SSL certificate signed from verisign for my ECC5.0 SP17 backend. When I try to import this certificate response in Tr STRUSTSSO2 it says cannot import certificate response.
Please help.
Thanks
Sheril

Hi
Thanks for the helping me out. I have managed to find a fix for the problem. All you had to do was to restore the SSL certificate. I was trying to do this for a system which was a copy of the production and the certificate was generated for the system before the refresh. So all I had to do was to restore the SSL.
Thanks
Sheril
Thanks
Sheril

Cannot import certificate using keytool

Hi,
I used the below command to generate the key pairs and CSR:
keytool -genkey -alias myalias -keyalg RSA -keystore .keystore
keytool -certreq -keystore .keystore -alias myalias -file jetco.csr
Then I copied the CSR and signed by the CA. The CA issued the certificate and I import the certificate (filename: DownloadCert) with the following command:
(the certificate from the CA is in V3 X.509 base64 encoded)
keytool -import -alias myalias -file DownloadCert -keypass ****** -keystore .keystore -storepass ******
Then I got the error : keytool error: java.security.cert.CertificateException: IOException: Sequence tag error.
Does anyone know how to fix the above problem?
Thank you very much! It is very urgent.... PLEASE!!!!
VL

u might not have saved the attachment properly. if u r
using windows, can u c the certificate clearly by
clicking on the file. the filename must end with a
.cer extension so that u can double click on it.After I modified the content of the file from CA. Now I can import the certificate in a keystore file.
Thank you for your help.

I have multiple devices with the same cerificate, once I have a an exception for one, FF denys access to the others. I cannot change the certificates, I need to stop FF blocking them.

I have multiple devices with the same cerificate, once I have an exception for one, FF denys access to the others. I cannot change the certificates, I need to stop FF blocking them.
== This happened ==
Every time Firefox opened
== I attempt to access a web front end on an IBM SVC device

You can't use the same certificate more than once.
See also [[Certificate contains the same serial number as another certificate]]

Using keytool to import a certificate

I'm trying to import in the samplecacerts file a seft signed certificate generated for test purposes on my test web server.
The command I issued was:
keytool -import -alias mycert -file mycert.cer -keystore samplecacerts -trustcacert -storepass changeitand the answer was:
keytool error: Signature not availableIf I accept this certificate using my class that implements the interface X509TrustManager and getting data using HttpsURLConnection all works fine.
I used two methods to export the certificate:
1. I exported it after accepting it in Ienternet Explorer
2. I wrote it from the method isServerTrusted as suggested by Aseem in his sample code (http://forum.java.sun.com/thread.jsp?forum=9&thread=14884&start=25&range=1&hilite=false&q=)
The two generated files are identical.
Anyone can help me?
Thank
Aldo

I am having the same problem - and I don't understand the one reply you got.
So here goes. WHY can I easily import a self-signed certificate as a "trusted root" in IE, but I cannot import the same certificate into my cacerts file using keytool.exe? Keytool always gives the error, "Signature not available".
Can someone please tell me what the heck I am supposed to do? All I want to do is be able to connect to an https URL in my Java code and read the contents. I "trust" the darn server, but the keytool utility doesn't seem to "trust" me....
BTW, yes I am using JSSE, it's not a code problem it's a keytool problem.

KeystoreException : Cannot overwrite own certificate

Hi,
I am trying to import reply for request certification, but i have the following exception:
"Cannot overwrite own certificate"
The code to create the keystore is as follow :
keyStore = KeyStore.getInstance(keyStoreType, provider);
keyStore.load(null, null);
gen = KeyPairGenerator.getInstance("DSA", provider);
algo = "SHA1withDSA";
gen.initialize(512, new SecureRandom());
pair = gen.generateKeyPair();
privKey = (PrivateKey)pair.getPrivate();
pubKey = (PublicKey)pair.getPublic();
X509V3CertificateGenerator certGen = new X509V3CertificateGenerator();
certGen.setSerialNumber(BigInteger.valueOf(System.currentTimeMillis()));
certGen.setIssuerDN(new X509Principal(attrs));
certGen.setNotBefore(new Date(System.currentTimeMillis() - 50000));
certGen.setNotAfter(date);
certGen.setSubjectDN(new X509Principal(attrs));
certGen.setPublicKey(pubKey);
certGen.setSignatureAlgorithm( algo);
Certificate[] chain = new Certificate[1];
try
X509Certificate cert = certGen.generateX509Certificate(privKey);
cert.checkValidity(new Date());
cert.verify(pubKey);
chain[0] = cert;
catch (Exception e)
{return false;
keyStore.setKeyEntry(alias, privKey, passwd.toCharArray(), chain);
FileOutputStream out = new FileOutputStream(keyStorePath);
keyStore.store(out, passwd.toCharArray());
out.close();
The code to import the reply to the certification request is as follow :
InputStream fis = new FileInputStream(keyStorePath);
keyStore.load(fis, passwd.toCharArray());
fis.close();
fisP = new FileInputStream(pathcsr);
CertificateFactory factory = CertificateFactory.getInstance("X.509");
java.security.cert.Certificate cert = factory.generateCertificate(fisP);
this.keyStore.setCertificateEntry(alias, cert);
fisP.close();
//Save the new keystore content
FileOutputStream out = new FileOutputStream(keyStorePath);
keyStore.store(out, passwd.toCharArray());
out.close();
At the flooowing line :
this.keyStore.setCertificateEntry(alias, cert);
I have a KeyStoreException at the line in bold with the message "Cannot overwrite own certificate"
Please, can anyone help me?
Many thanks.

The exception is correct. You can't overwrite a key alias with a certificate alias. What
you need to do is call KeyStore.setKeyEntry again, and overwrite the previous entry.
Use the same key as before, but now specify the new certificate chain received in the certificate reply.

Unable to import PKCS12 certificate file to ACE module

Hi,
I'm currently in the process of replacing my CSS-appliances with the ACE module. So far everything's been smooth, but when I'm trying to import a certificate file to the respective context using the "crypto import"-command, ACE can't recognize the filetype, it's just marked as UNKNOWN. On the CSS I had to specify PKCS12 as the fileformat, but this is apparently not an options on the ACE. Does anyone know the equivalent commmand on how to import a PKCS12-file to the ACE?
Thankx
/Ulrich
PS! I haven't created a cert chaingroup, as I was told this would not be necessary.

Hi Ulrich,
Short answer is you cannot import PKCS12 format. You'll need to extract the component parts into PEM format outside of the ACE and then use crypto import.
You will also need a chaingroup unless this is a self-signed certificate. Again any intermediate and root certificates will need to be in PEM format.
HTH
Cathy

[HELP] Import PFX certificate from a command line

Dear all,
I am currently trying to import a user certificate with a .pfx extension. The certificate includes a private key as well as a password.
The import works perfectly well in GUI, but when I try to import via CERTUTIL (the specific one for firefox), I keep getting an error message:
Can certutil for firefox import .pfx files?
These are the steps we performed:
- Export certificate from the Windows store with a provate key and a password
- Script checks the %appdata% folder and parses the different profiles within the Firefox profile folder
- The folder ending with .default is targetted
- The script then runs certutil to import the certificate (exported in step 1) in the cert8.db found in the folder (parsed in step 3)
And we are blocked :(
Help would be greatly appreciated.
Thx,
Ben

benjaidafufukil,
Did you script the export from the Windows store as well? Would it be possible to see a copy of your script? We need to do the same thing on about 2000 workstations.
Eric

Cannot import my certificate in firefox

Similar Messages

Maybe you are looking for