Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual page 113

Command-line tools guide
Table of Contents

Advertisement

Click the Security Info button on Communicator's toolbar.
a.
Click Yours under Certificates and select a certificate to rename.
b.
Click Export and save a PKCS #12 copy of the certificate to a safe location
c.
(if no copy already exists). This copy is needed if replacement fails.
Click Delete and remove the certificate from the certificate database. Note
d.
that the certificate's corresponding private key isn't deleted, just the
certificate itself.
Retrieve the certificate again from the Certificate Authority. The specific
e.
procedure for doing this depends on the Certificate Authority being used.
Be very sure that the replacement is the correct one.
Enter a new name for the certificate when downloading it.
f.
Note: The Export and Import buttons in the Security Info dialog box can't be
used to change certificate nicknames. These functions can affect only a
certificate's exported PKCS #12 filename.
When I click the Security icon in the Communicator toolbar, click Yours under
Certificates, select my object-signing certificate, and click Verify, Communicator
informs me that the certificate is not valid. Why?
This is a common occurrence. The Verify button works with S/MIME
certificates only. It does not work with object-signing certificates.
To verify an object-signing certificate, use
signtool -l -k
where nickname is the nickname of the certificate you want to verify.
I get the following error when trying to create a test certificate:
failure authenticating to key database .: Security I/O error.
This error typically means that you have not yet set a password for the
certificate database. To set the password for the Communicator database, click
the Security icon in the Communicator toolbar, click Passwords, and click Set
Password to create a password.
Objects to be signed will be stored and used long-term, well after the certificates
used for signing have expired. Will signed objects still be trusted even after their
object-signing certificates have expired?
nickname
Answers to Common Questions
Chapter 13
Netscape Signing Tool
113

Advertisement

Table of Contents
loading

This manual is also suitable for:

Certificate management system 6.0

Table of Contents