<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body>
IMHO, it's a crypto library problem. I am not sure I see any reasons <br>
for this "public key as key id" requirement but I do not have pkcs8 <br>
format in front of me right now so I might be wrong. However, I know <br>
that some other crypto libraries can get private key from pkcs8 file <br>
directly and this makes me think that it is possible.<br>
<br>
Aleksey<br>
<br>
<blockquote type="cite" cite="mid3EFBD356.2080307@netscape.com"><font
size="2"><font face="Arial,sans-serif">The code I've written does
exactly this.... but I did not anticipate<br>
that I wouldn't have an NSS API that allows me to import<br>
an encrypted private key from a p8 file (the current API<br>
requires a public key as a "key id"). I tried to get around it<br>
by using an artificial "key id", importing the private key, and<br>
then extracting the public key and re-importing the private key...<br>
but that didn't work :(.<br>
</font></font> </blockquote>
</body>
</html>