Re: where does certutil put a cert's private keys?

2008-12-04 Thread David Stutzman
Since you say you originally created the key/cert with openssl, just use openssl to package those things up into a PKCS#12 file and use pk12util to import them. First, copy the text of the keyfile into the certfile or vice versa (or cat them both into a 3rd file), it doesn't matter as long as both

Re: where does certutil put a cert's private keys?

2008-12-03 Thread Arshad Noor
I must apologize; I was in error about keytool being able to export a P12 file out of the JCE keystore - this cannot be done by keytool yet - you can only import P12's in JDK6. However, if you're still interested in keytool for generating keys and certs, "keytool -help" or "man keytool" provide a

Re: where does certutil put a cert's private keys?

2008-12-03 Thread fat.fuck
On 2 Dec, 22:11, Arshad Noor <[EMAIL PROTECTED]> wrote: > I've never had to use ClientAuth with Sun's Directory Server, > but here are some observations: > > 1) Keys are *never* stored in certN.db; they're always in keyN.db; >     only certificates are in certN.db.  The association between the >  

Re: where does certutil put a cert's private keys?

2008-12-02 Thread Nelson Bolyard
ff wrote: > i remembered what documentation instructed me to use $HOME/.netscape/ > cert7.db. it was sun's "Sun ONE Server Console 5.2 Server Management > Guide". the chapter on "Using SSL and TLS with Sun ONE Servers": > > http://docs.sun.com/source/816-6704-10/ssl.html#22531 > > "Copy the Ne

Re: where does certutil put a cert's private keys?

2008-12-02 Thread fat.fuck
On Dec 3, 1:21 am, "fat.fuck" <[EMAIL PROTECTED]> wrote: > On 3 Dec, 00:29, Eddy Nigg <[EMAIL PROTECTED]> wrote: > > > > > On 12/03/2008 02:20 AM, fat.fuck: > > > > i didn't explicitlly supply the certs' private key file location to > > > the certutil command line when i added the certs to cert7.db

Re: where does certutil put a cert's private keys?

2008-12-02 Thread Nelson Bolyard
fat.fuck wrote: > first off: i am but a humble java programmer by trade; not a sysadmin; > nor a network guy. so a lot of nss tool-related stuff is a foreign > language to me. please, help a certutil rookie make sense of the > world? Welcome. > using openssl, i created a self-signed ca cert (and

Re: where does certutil put a cert's private keys?

2008-12-02 Thread fat.fuck
On 3 Dec, 00:29, Eddy Nigg <[EMAIL PROTECTED]> wrote: > On 12/03/2008 02:20 AM, fat.fuck: > > > > > i didn't explicitlly supply the certs' private key file location to > > the certutil command line when i added the certs to cert7.db > > (although, the private key .pem files were in fact in the same

Re: where does certutil put a cert's private keys?

2008-12-02 Thread Eddy Nigg
On 12/03/2008 02:20 AM, fat.fuck: i didn't explicitlly supply the certs' private key file location to the certutil command line when i added the certs to cert7.db (although, the private key .pem files were in fact in the same directory as the .pem cert files when i ran the certutil command).

Re: where does certutil put a cert's private keys?

2008-12-02 Thread fat.fuck
On Dec 2, 11:02 pm, Rich Megginson <[EMAIL PROTECTED]> wrote: > fat.fuck wrote: > > On Dec 2, 8:59 pm, "fat.fuck" <[EMAIL PROTECTED]> wrote: > >> first off: i am but a humble java programmer by trade; not a sysadmin; > >> nor a network guy. so a lot of nss tool-related stuff is a foreign > >> lang

Re: where does certutil put a cert's private keys?

2008-12-02 Thread Rich Megginson
fat.fuck wrote: On Dec 2, 8:59 pm, "fat.fuck" <[EMAIL PROTECTED]> wrote: first off: i am but a humble java programmer by trade; not a sysadmin; nor a network guy. so a lot of nss tool-related stuff is a foreign language to me. please, help a certutil rookie make sense of the world? i'm experim

Re: where does certutil put a cert's private keys?

2008-12-02 Thread Arshad Noor
I've never had to use ClientAuth with Sun's Directory Server, but here are some observations: 1) Keys are *never* stored in certN.db; they're always in keyN.db; only certificates are in certN.db. The association between the key and the cert is made via the cert's nickname (in your case:

Re: where does certutil put a cert's private keys?

2008-12-02 Thread fat.fuck
On Dec 2, 8:59 pm, "fat.fuck" <[EMAIL PROTECTED]> wrote: > first off: i am but a humble java programmer by trade; not a sysadmin; > nor a network guy. so a lot of nss tool-related stuff is a foreign > language to me. please, help a certutil rookie make sense of the > world? > > i'm experimenting w

where does certutil put a cert's private keys?

2008-12-02 Thread fat.fuck
first off: i am but a humble java programmer by trade; not a sysadmin; nor a network guy. so a lot of nss tool-related stuff is a foreign language to me. please, help a certutil rookie make sense of the world? i'm experimenting with using client authn between a command-line ldapsearch client (for