The iPlanet database files which contain the certificates are in the alias
directory under your iPlanet installation, and they have names ending in
key3.db and cert7.db.  If they are renamed to key3.db and cert7.db and put
under your .netscape directory, you can use a Netscape browser to export
certificates from these files into .p12 files, or, alternatively, as Steve
suggests, you can look at www.mozilla.org for the NSS tools to manipulate
them.

Lynn Gazis

-----Original Message-----
From: Dr S N Henson [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 03, 2001 12:48 PM
To: [EMAIL PROTECTED]
Subject: Re: 2 certs with same name


Lukasz Jazgar wrote:
> 
> 
> I use iPlanet Webserver. Every instance of this server manages its own
> secure database of keys/certificates. Key pairs are generated internally
> by server and there is no possibility to import them from file.
> 

The key pairs and certificates of Netscape servers are in some database
files whose name I can't recall but it should end in .db . These can be
manipulated using the NSS tools (see www.mozilla.org) or possibly also
with a Netscape browser if they are renamed to key3.db and cert7.cb.

It is possible to both export keys and certificates and import keys and
certificates into the database. It may also be possible to copy the
databases from one location to another and have them use the same keys
and certificates.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to