List:       mozilla-crypto
Subject:    Using cmsutil to sign content with smartcard
From:       Xavier Claude <claude.xavier () gmail ! com>
Date:       2014-10-20 12:29:01
Message-ID: bec52ad2-8bda-4b03-821e-30c4f29e59fd () googlegroups ! com
[Download RAW message or body]

Hello,

I'm trying to use cmsutils from the NSS library to sign content with a cert=
ificate from a smartcard. It works in Thunderbird/Icedove but I can't find =
the command that will do the same action. If I try (the mail address has be=
en redacted):

$ cmsutil -S -i /tmp/txt -o /tmp/sign -d ~/.icedove/abcde111.default/ -N my=
mail@example.com

I have the following error:

cmsutil: the corresponding cert for key "mymail@example.com" does not exist=
: =

Certificate extension not found.
cmsutil: problem signing: Certificate extension not found.

But, if I use

$ certutil -L -n mymail@example.com  -d ~/.icedove/abcde111.default/

or

$ certutil -V -n mymail@example.com -u S -d /h~/.icedove/abcde111.default/

I returns the expected result.

Can you tell me what I'm doing wrong=A0?

Thank you for your answers.
-- =

dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto