Subj : certtool --import fails with CryptLib error -43 (CRYPT_ERROR_NOTFOUND)
To   : GitLab issue in main/sbbs
From : Randy Blodgett
Date : Thu Aug 13 2026 05:30:55

reopen https://gitlab.synchro.net/main/sbbs/-/issues/1216

certtool --import fails with CryptLib error -43 (CRYPT_ERROR_NOTFOUND) Summary `certtool --import` fails reproducibly with a CryptLib `-43` (`CRYPT_ERROR_NOTFOUND`) error when attempting to import an external certificate/key pair into `ssl.cert`, using a correctly-formatted combined PEM file matching the format shown in the wiki's own example. Environment Synchronet version/build: 3.21e OS: Windows 11 Pro, Version 25H2 (OS Build 26200.8973) Install type: \[fresh / upgraded — fill in if known\] Steps to reproduce Obtain a valid certificate + private key + chain (in this case, from a separate successful ACME/Let's Encrypt issuance). Combine into a single PEM file in the order and format documented on the Synchronet wiki's `certtool` import example (key, cert, chain). Run `certtool --import <path-to-combined-pem>` against the running `ssl.cert`/cryptlib keyset. Observe failure. Expected result Certificate imports successfully and is installed into `ssl.cert`'s cryptlib keyset, replacing the self-signed cert. Actual result Fails with:

```
CryptLib error -43 (CRYPT_ERROR_NOTFOUND)
```

Additional notes This is not a formatting issue — the input file matches the wiki's own documented example structure. Independently corroborated by a third party: a separate sysop reported hitting the identical `-43` error against the exact same wiki example file in a November 2025 forum post, ruling out a one-off environmental cause. Happy to provide the exact combined PEM structure (redacted) or further logs on request.
--- SBBSecho 3.37-Linux
 * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

.