Re: unknown attr1.3.6.1.4.1.311.17.1 error

From: Lucas Galfaso (lgalfaso_at_NO_CAPSfd.com.ar)
Date: 02/29/04


Date: Sun, 29 Feb 2004 14:50:54 -0300

Afres seeing your reply, I start looking for definitions and too many
different ones.

1.3.6.1.4.1.311, this is Microsoft
1.3.6.1.4.1.311.17, and this Microsoft PKCS12 attributes

now
1.3.6.1.4.1.311.17.1
could be szOID_LOCAL_MACHINE_KEYSET or CSP_PROVIDER_NAME or ...
and the list keeps going.
Every day I understand a little bit less :-(

Lucas/

"Michel Gallant" <neutron@NOSPAMistar.ca> wrote in message
news:eOYjVNh$DHA.4060@TK2MSFTNGP10.phx.gbl...
> hmmm, I could have sworn that 1.3.6.1.4.1.311.17.1 was:
> PKCS_12_KEY_PROVIDER_NAME_ATTR
>
> I have found you with J2se v1.4 you can simply ignore that message without
> any problems.
> e.g.
> http://www.jensign.com/JavaScience/Thawte
>
> - Mitch
>
> "Lucas Galfaso" <lgalfaso@NO_CAPSfd.com.ar> wrote in message
> news:OFmy83d$DHA.2636@TK2MSFTNGP09.phx.gbl...
> > Hi,
> > 1.3.6.1.4.1.311.17.1 means "Microsoft RSA SChannel Cryptographic
Provider"
> > and is an attribute that keytools (and probably any SUN soft) does not
> > recognize.
> > The only workaround I know is to:
> > 1) import the pkcs12 using openssl and get the private key.
> > 2) generate another pkcs12 using openssl.
> > 3) use the new pkcs12.
> >
> > Lucas/
> >
> >
> > "daniele" <anonymous@discussions.microsoft.com> wrote in message
> > news:2CDD0770-4F14-4D57-A172-1C61C32EF548@microsoft.com...
> > > Hi,
> > > I'm trying to sign a jar file containing an applet. First I created
> > > a self-signed certificate with makecert:
> > >
> > > makecert -sk "mykey" -pe -r -e "12/31/2010" -sky signature -n
"CN=dan" -ss
> > "my"
> > >
> > > Then I exported the cert into a .pfx file (danCert.pfx) and I used it
to
> > sign
> > > the jar with the following command:
> > >
> > > jarsigner.exe -keystore danCert.pfx -storetype pkcs12 ftp.jar mykey
> > >
> > > After entered the passphrase, I get the following output message:
> > >
> > > unknown attr1.3.6.1.4.1.311.17.1
> > >
> > > The jar file seems to be updated (timestamp changes), but when
> > > I load the html page containing it, the browser does not
> > > recognize it is signed (it correctly loads the applet).
> > >
> > > What does the "unknown attr1.3.6.1.4.1.311.17.1" message mean?
> > >
> > > NOTE: I get the same message using keytool also.
> > >
> > > (env info: Win XP Pro, IE6.0 128bit, j2se 1.4.1)
> > >
> > > Thanks
> > > daniele
> > >
> >
> >
>
>