Error importing certificate

Hi,
Now I received a new set of X509 certificates. " imported fine including private keys, but one gives an error:

C:\Users\Usuario>gpgsm -vv --import PKCS12_Credential_xx.pfx
gpgsm: 1224 bytes of 3DES encrypted text
gpgsm: decryption failed; trying charset ‘ISO-8859-1’
gpgsm: decryption failed; trying charset ‘ISO-8859-15’
gpgsm: decryption failed; trying charset ‘ISO-8859-2’
gpgsm: decryption failed; trying charset ‘ISO-8859-3’
gpgsm: decryption failed; trying charset ‘ISO-8859-4’
gpgsm: decryption failed; trying charset ‘ISO-8859-5’
gpgsm: decryption failed; trying charset ‘ISO-8859-6’
gpgsm: decryption failed; trying charset ‘ISO-8859-7’
gpgsm: decryption failed; trying charset ‘ISO-8859-8’
gpgsm: decryption failed; trying charset ‘ISO-8859-9’
gpgsm: decryption failed; trying charset ‘KOI8-R’
gpgsm: decryption failed; trying charset ‘IBM437’
gpgsm: decryption failed; trying charset ‘IBM850’
gpgsm: decryption failed; trying charset ‘BIG5’
gpgsm: data error at “decrypted-text”, offset 4287780383
gpgsm: error at “bag-sequence”, offset 49
gpgsm: error parsing or decrypting the PKCS#12 file
gpgsm: cantidad total procesada: 0


It imported fine in windows certificates store. If I try to export and then import on gpg without extended properties also fails:

C:\Users\Usuario>gpgsm -vv --import 1234.pfx
gpgsm: data error at “pkcs5PBES2-params”, offset 134
gpgsm: error at “bag-sequence”, offset 49
gpgsm: error parsing or decrypting the PKCS#12 file
gpgsm: cantidad total procesada: 0

It imports fine on XCA front-end for openssl.

Any help?

BR.

Josep M.

Solved using a walkaround!
1.- Export from windows cert store a cert without private key, then import on gpg. It works fine.
2.- Export from windows store a .pfx in format triple DES then import on gpg. It worked fine!!
I don’t know why…

BR.

Josep M.

Hi Josep,

good you’ve found a solution, see https://wiki.gnupg.org/X.509
for some more background.

Best,
Bernhard