On Sat, Mar 19, 2005, Ricardo M. Stella wrote: > > I found most info on how to extract a certificate (certutil) and possibly > how to extract the private key from Netscape's format. > > But I'm trying to do the opposite. > > We have some certificate and keys already established (openssl) and want > to use them with iPlanet's directory server. > > It seems that the only way would be to convert our existing private key > into the old Netscape format. It allows you to import a certificate but > won't let you use an existing private key. > > Some document I found mentioned about an util called rkey11 but was not > able to find it anywhere (seemed to have been included with old Netscape > 2.x web servers... >
Convert the key and certificate to PKCS#12 format with the pkcs12 utility. Take a version of Netscape and import the PKCS#12 file. Then use the key3.db file from there. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
