Re: openssl key/cert -> NS key/cert db

[Julien Pierre]

Nelson B. Bolyard wrote:

.p12 files contain the "nickname" for the certs.  When mozilla imports a
cert from a .p12 file, it uses the nickname found in the .p12 file.

If I'm not mistaken, iPlanet web server requires that the server's cert
have a particular nickname.  It's possible that this was a requirement of
the 5.x server but not the 6.x server.  Julien, can you tell us what
nickname the server cert should have?

The default name used by all versions of NES is Server-Cert .

It is however configurable.

In NES / iWS 4.x versions, you set the nickname of the cert in magnus.conf using the "CERTDefaultNickname" directive. This has to be set manually - there is no admin UI support for it.

In 6.x , the nickname of the cert is configurable through the UI. It is stored in server.xml within the SSLPARAMS structure.