On Nov 3, 2005, at 2:28 PM, Jim Bohnsack wrote:
I am trying to install the new Sine Nomine SSLSERV code on a test system but I can't figure out how, with the existing SSLADMIN commands, to move the existing and unexpired certificate from the old SSLSERV database to the new one. I can export the certificate from the old database and do the SSLADMIN STORE fn CA label, but when I do a SSLADMIN STORE fn SERVER, I get the 'DTCSSL403E No certificate request is found for the certificate.' message. Since I was able to do the SSLADMIN STORE fn CD label, I thought that it might be all that was needed, but when I try, unsuccessfully, to connect, I can't and see a msg in the SSLSERV log saying 'DTCSSL501E No SERVER certificate was found with this label.'
Hm. Obviously you could generate a new certificate request and then sign it with the CA you've imported....but I think you should be able to do the STORE of the existing cert too, once you have the CA that signed it in place. I'll take a look and see what I can figure out, but if someone knows the answer offhand.
Adam
