I have deployed a PKI server and successfully able to generate the ECC based user or client certificates. but non of the web browser support ECC as public key. I have tried different tools and also trying to work this with MS CAPI through openssl but haven't get succeed.
Can some one recommend a utility for any of the web browser that can help to import the ECC based user certificate into its keystore?
or is there any library that can support this? here is the my certificate..
/ejbca/p12/pem#
openssl x509 -in testp256.pem -noout -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5786377012642498827 (0x504d573c470ac90b)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN=ECCP-256, OU=admin, O=test
Validity
Not Before: Aug 23 13:32:42 2013 GMT
Not After : Aug 23 13:32:42 2015 GMT
Subject: CN=testp256
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:81:65:b4:c1:f4:95:7f:68:46:80:f2:42:5b:bf:
87:84:0a:98:42:3d:0a:e8:70:5c:e4:b3:4e:d7:29:
71:af:ce:c5:b3:fe:fd:02:2a:f3:bd:83:f7:50:23:
d1:75:af:dd:23:1f:be:62:a7:7a:d0:e2:be:03:c2:
e3:18:89:21:f4
ASN1 OID: prime256v1
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:27:DD:14:F1:42:0E:9C:E3:50:E1:D1:33:20:8A:53:DE:F2:14:14
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Authority Key Identifier:
keyid:EA:55:E0:24:6F:EA:9E:3C:63:FD:FF:AA:A6:DC:31:1F:F0:1C:FB:F7
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Client Authentication, E-mail Protection
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:08:1b:44:e0:9b:ab:3c:9e:f6:e3:ef:28:d4:1e:
cd:08:f4:1a:f5:21:c8:9f:e6:e0:6c:5e:7f:52:d0:47:a5:bf:
02:21:00:ce:1a:58:57:f1:6b:82:5f:f2:72:af:ea:95:a3:05:
02:ab:63:bf:13:fe:98:c2:0e:c2:a5:d3:d9:b9:74:77:6a