Dorwin,

Netscape uses a Berkeley DB database for key storage. From what I can
remember when I tried this, it uses rc4 to encrypt the database with an
SHA'd version of the database password. In the end I gave up and 
generated a new key.

Conceptually, when netscape is asked to generate a new database it 
generates the key and then provides you with the CSR which is enough
for a CA to give you a certificate.

I would summarize your options as follows:

. Try and crack open the database (doable but time consuming)
. Hire Dr Stephen N Henson (http://www.drh-consultancy.demon.co.uk)
. Create a new key and buy a new certificate.

Later,
Kos

| Hi,
| 
|   If my first message gets posted
| then forgive me for reposting...but it's
| been a while and I haven't seen it.  I'm
| trying to migrate a certificate from netscape
| to apache.  Has anyone done this?  I
| have my .db files from netscape and I also
| have my CSR from netscape.  Can I use
| any of these to get a new private key?  I already
| created my certificate from the data verisign sent
| me.
| 
| Thanks,
| 
| Dorwin
| ______________________________________________________________________
| Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
| User Support Mailing List                      [EMAIL PROTECTED]
| Automated List Manager                            [EMAIL PROTECTED]


-- 
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to