Re: CAPICOM.EnvelopedData decrypt: where to put certificate?

From: ralpher (ralpher.1r1ux2_at_mail.webservertalk.com)
Date: 06/22/05


Date: Wed, 22 Jun 2005 14:24:05 -0500


The EnvelopedData.Decrypt command shows such error message when the
private key of the Certificate is not accessible either because the
certificate is not well installed or it is corrupt.

To see this you may add this code to your program>

if Certificate.PrivateKey.IsAccessible = true then
Alert("The private Key is Accesible")
else
Alert("The private Key is not Accesible")
end if

This code comes with CAPICOM package from microsoft (SDK Downloads)

Try re-installing the certificate without checking any extra security
box the process shows you and check your private key is accessible
before anything else.

I fixed the same problem this way.

regards.

--
ralpher
------------------------------------------------------------------------
Posted via http://www.webservertalk.com
------------------------------------------------------------------------
View this thread: http://www.webservertalk.com/message316097.html
 


Relevant Pages

  • Re: Unable to use third-party cert after Exch Sp2 update on SBS200
    ... Every *server* certificate in IIS has to ... The public key is sent when a request from a browser ... The public key is used to *decrypt* data. ... The private key is used ...
    (microsoft.public.windows.server.sbs)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • Re: starttls certificate question
    ... It works fine for sendmail, in fact I expect it was written up ... But anyway, regarding your problem finding the private key, read the ... "(certificate and private key in file newreq.pem)" ... If you read the OpenSSL documentation for the 'req' command, ...
    (comp.mail.sendmail)
  • Re: Certificates, Keys, Mobile Users, Intended Usage
    ... Option that you think about uses self signed EFS certificates. ... Better then exporting user's private key as backup is to setup DRA (Data ... there is no EFS certificate and it will generate a new one. ... Mobile computer users benefit from encrypting sensitive ...
    (microsoft.public.win2000.security)