I have a digital cert issued by my organization for signing email. It's imported into Thunderbird and the key and cert can be exported to a
.p12 from within Thunderbird.
I'd like to use the
.p12 to generate a GnuPG key pair for use with the Thunderbird Enigmail extension. Is this possible to do or are the technologies just way to different.
I've been able to export both the private key and cert to
x509 certs. I've imported the private key to GnuPG via
gpgsm. If I issue
gpgsm --list-secret-keys, I get (some info redacted):
$ gpgsm --list-secret-keys /home/use/.gnupg/pubring.kbx -------------------------------- ID: 0xFFFFFFFFAxxx S/N: 00C2A8Exxx Issuer: /CN=COMODO SHA-256 Client Authentication and Secure Email CA/O=COMODO CA Limited/L=Salford/ST=Greater Manchester/C=GB Subject: /CN=xxx/.../C=US/EMailemail@example.com/... aka: firstname.lastname@example.org aka: email@example.com validity: 2017-03-28 00:00:00 through 2020-03-27 23:59:59 key type: 2048 bit RSA key usage: digitalSignature keyEncipherment ext key usage: emailProtection (suggested), clientAuth (suggested) policies: 184.108.40.206.4.1.64220.127.116.11.3.5:N: fingerprint: B2:8F:37:BA:xxx
Do I need to import the public key into
gnupg as well? It doesn't show up when I do
--list-keys. Also, do I then need to export the key pair from
GnuPG for use with Enigmail?