OSX: Import certificate into keychain

[Christian Witt]

Hi,

I have a certificate exported from Windows Internet Explorer
(certificate + private key) using the pfx-format. No I want to import
this certificate and the corresponding private key into the keychain.

I can use the openssl-tool to spli up the pfx-file into the
certificate and the private-key. And I can import the certificate
using the certtool into a keychain. But how do I import the
private-key? In the Security/Certifcate/Key-Services I found functions
for creating and importing a public/private-key-pair but not for
importing a private key.

Does anybody now more details about the
SecCertificateBundleImport-function? The header SecCertificateBundle.h
is mentioned in the documentation which came with Jaguar but not on
the apple-website.

And what das the return-code -4 means? It is returned when I call the
SecCertificateBundleImport-function.

thanks in advance

Christian

[Thomas Engelmeier]

In article <50052383.0309120222.678b82bc@posting.google.com >,
[email]christian.witt@epost.de[/email] (Christian Witt) wrote:

> Hi,
>
> I have a certificate exported from Windows Internet Explorer
> (certificate + private key) using the pfx-format. No I want to import
> this certificate and the corresponding private key into the keychain.

I just used certtool to import the certificates of fernuni-hagen.de for
Safari.

More information about importing them is at <http://www.macosxhints.com/article.php?story=20030124064421978>

Regards,
Tom_E

[Christian Witt]

Thomas Engelmeier <aug03_nospam@engelmeier.com> wrote in message news:<bjt4jk$mhtku$1@ID-2640.news.uni-berlin.de>...

> In article <50052383.0309120222.678b82bc@posting.google.com >,
> [email]christian.witt@epost.de[/email] (Christian Witt) wrote:
>

> > Hi,
> >
> > I have a certificate exported from Windows Internet Explorer
> > (certificate + private key) using the pfx-format. No I want to import
> > this certificate and the corresponding private key into the keychain.

>
> I just used certtool to import the certificates of fernuni-hagen.de for
> Safari.

No, this doesn't work in my case, because I want to import not only
the certificate but also the private key belonging to the
certificate's public key. certtool just imports the certificate. In
your case (importing the root-certificate from hagen) you do not need
the private key (and you do not even know it)

Ciao

Christian