如何将 PKCS#12 导入 Seahorse
我有一个 PKCS#12 文件,已成功导入到 Firefox 中。现在,我想将相同的文件导入 Linux,以便对这些密钥使用公钥加密。我尝试使用 Seahorse 导入它,但失败了。也许 PKCS#12 文件被设计为仅在浏览器中使用?我想知道...
谢谢!
I have a PKCS#12 file which I have successfully imported into Firefox. Now, I would like to import the same file into Linux in order to use public-Key cryptography with these keys. I have tried to import it using Seahorse, but it failed. Maybe PKCS#12 files are designed to be used only with browsers? I would like to know...
Thanks!
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
PKCS#12 是 RSA 为 PKI(公钥基础设施)制定的标准。它由证书树及其随附密钥组成。您的 PKCS#12 包含密钥和从叶(最终实体)证书开始的证书链,以及导致(但可能不包括)另一方信任的证书的中间证书。
Seahorse 使用的 PGP 是一种基于信任网络(google it)的处理公钥/私钥的不同方式。它与您现在拥有的 PKI(X) 不直接兼容。您可以提取密钥并从中生成 PGP 密钥,但无论如何您都必须重新建立信任,因此您最好使用不同的密钥对......
PKCS#12 is a standard made by RSA for PKI (public key infrastructure). This consists of a tree of certificates and their accompanying keys. Your PKCS#12 contains a key and a a chain of certificates starting with the leaf (end entity) certificate, and intermediate certificates that lead up - but may not include - a certificate that is trusted by the other side.
PGP, which is used by Seahorse is a different way of handling public/private keys, based on a web of trust (google it). It is not directly compatible with PKI(X) which you have now. You could extract the key and generate a PGP key out of it, but you would have to reestablish trust anyway, so you might as well use a different key pair...