I had downloaded a verified (not self-signed) S/MIME certificate with iceweasel (firefox) which was stored in cert8.db
Then I used:
certutil -L -d <path_to_folder_that_cert8.db_resides>
in order to list the certificates, and then I extracted the .p12 file using the name of my certificate that certutil gave me:
pk12util -o mycertfile.p12 -n "<name_found_from_certutil>" -d <path_to_folder_that_cert8.db_resides>
The problem is that I lost the access to the PC that the p12 was stored and now I have only a cert8.db copy to another PC. Thus I repeated the certutil && pk12util
commands, but certutil fails with:
certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.
I have desperately tried at 3 different computers, including one with identical kernel and libnss3-tools
version, (like the initial desktop where I extracted the p12 successfully) which is:
$ uname -a
Linux commander 3.16.0-4-amd64 #1 SMP Debian 3.16.7-2 (2014-11-06) x86_64 GNU/Linux
libnss3-tools
version: 2:3.17.2-1
Any thoughts?
Thanks