1. Install and run at least once Mozilla Firefox (current version 5)
2. Please download from your Android phone to the PC: - Mozilla Firefox:
/Android/data/org.mozilla.firefox/files/mozilla/.default/cert9.db
/Android/data/org.mozilla.firefox/files/mozilla/.default/key4.db
Thanks to JD:3. Move them to a MS Windows directory (Ex.: C:\keys )
He didn't have the mozilla dir with the cert9.db and key4.db files in it.
He got it to work by installing Firefox, then move it with App2SD (free in market) to my SD-card.
This way he received the folder /Android/data/org.mozilla.firefox/files/mozilla and also the folder '.default' where the 2 db-files were located.
After following the other step in this post and updating the 2 .db files (via pk12util.exe) He moved Firefox back from his SD-card to Local Storage and Things worked as they should be.
4. Download the package NSS_Tools_x86_from_NSS_3.12.7 Tools.zip and extract it into a directory (Ex.: c:\nss-3_12_7)
5. Run command prompt ( CMD.EXE ) and change the directory where you have extracted NSS_Tools_x86_from_NSS_3.12.7 Tools.zip(Ex.: "cd c:\nss-3_12_7")
6. Executhe the command:
pk12util.exe -i -d sql:
( Ex.: c:\nss-3_12_7>pk12util.exe -i c:\epay.p12 -d sql:C:\keys )
Enter password for PKCS12 file:
pk12util.exe: PKCS12 IMPORT SUCCESSFUL
If you have more client certificates - do the same command again.
Thanks to GG:7. Move the "cert9.db" and "key4.db" files back to your Android phone. If necessary fix the ownership and access rights.
Hi Ivo, We ran into this odd behaviour: When using the pk12util.exe, we got this question: "Enter a password which will be used to encrypt your keys. The password should be at least 8 characters long, and should contain at least one non-alphabetic character." As a mistake, we filled out our pkcs12 password here. You should skip this question by hitting enter twice. Then run the util again, and enter your pkcs12 password. on Client SSL Certificates with Android (2.3.3) OS on Samsung Galaxy S2
8. Restart Mozilla Firefox.
9. If you access a web site that needs client certificate authentication the browser will ask you to choose one of the imported client certificates and will you them