Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

certutil.exe -importpfx Root mitmproxy-ca-cert.p12 does not work

See original GitHub issue

OS: Windows 10 Mitmproxy ver: 4.0.4

I am unable to use cmd or PS to install the certificate. Running the provided command returns this:

C:\projects>certutil -importpfx Root mitmproxy-ca-cert.p12
Enter PFX password:
CertUtil: -importPFX command FAILED: 0x80092007 (-2146885625 CRYPT_E_SELF_SIGNED)
CertUtil: The specified certificate is self signed.

Issue Analytics

State:
Created 4 years ago
Comments:7 (2 by maintainers)

Top GitHub Comments

1reaction

mhilscommented, Nov 15, 2019

-importpfx requires the full certificate including private key. If you have a command to import the cert only we’d be happy to take that, please submit a PR! 😃

0reactions

andrejzozcommented, Jun 8, 2020

Hi, I’m begging here for some clarification - is this a bug or feature of certutil? In second case i have to scrap any usage of certutil and switch to PS.

Top Results From Across the Web

Certutil fails with self-signed certificate error - help

I am trying to add the mitmproxy-ca-cert.p12 certificate via cli in Windows 10 (17.09) with: certutil.exe -importpfx Root mitmproxy-ca-cert.p12.

certutil importpfx to a TPM fails

Hello,. I'm trying to import a PFX into the TPM KSP using certutil. The following command fails: certutil -p password -csp "Microsoft ...

Import pfx file into particular certificate store from command ...

It is frustrating that CERTUTIL cannot import a PFX to TRUSTEDPEOPLE. CertUtil works fine with a remote PSSession (PowerShell), but importpfx does not...

Certutil & Powershell – Export & Import PFX

In order to export a cert in the PFX format, you need to find the Serial Number or Thumbprint of the certificate you...

Converting .pfx Files to .jks Files

Note: Because DigiCert frequently issues certificates cross-signed by multiple Certificate Authorities for enhanced compatibility, your root certificate ...