ASP.NET Certificate Hell - 1024 bit? PFX linked to CSP?
From: Chris L. (clintved_at_isdh.state.in.us)
Date: 10/02/04
- Next message: cashdeskmac: "Tutorials"
- Previous message: Shawn Farkas [MS]: "RE: Using the Public Key embedded in the Assembly?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 1 Oct 2004 17:26:38 -0500
Two questions.
1. Can you not create a 1024 bit certificate with makecert on a Windows 2000
server machine? I tried adding the parameter -sp "Microsoft Enhanced
Cryptographic Provider 1.0", but I get the following error "Can't create the
key of the subject ('CN=myname')".
Then I try the trick where you create a keypair with the RSAProvider
programmatically, then use makecert with the same keystore name, but I get
the same error. It seems like a permissions type error preventing me from
linking up to a 1024bit key. So, anyway to create a 1024 bit key on a Win
2000 server machine without getting that error message (not creating
elsewhere then importing via PFX, that still programatic..see next
question)?
2. If the above is not possible, my question is if I create the 1024bit
certificate on another machine, then export with the private key and then
import on the target server, will the importing action create and link the
certificate to the key container? I used CAPICOM to observe what container
name was that it retrieved from the certificate (as all CAPICOM really
allows you to do is get the container name via the CN Subject and cert
keystore) and the name that's returned is a long GUID number similar to
this: {f69c2cf9-4gaa-48d8-9b36-8f43a53a5574}....not what the original
container name, as specificed by the -sk parameter with makecert, was. So it
doesn't appear to be linking the certificate with the keystore properly. Can
anyone verify this?
Thanks,
Chris
- Next message: cashdeskmac: "Tutorials"
- Previous message: Shawn Farkas [MS]: "RE: Using the Public Key embedded in the Assembly?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
