Greetings: The utility 'sec-key' bundled with Netscape Enterprise Server 3.63 only generates 1024 bit keys; finding a CA with good browser acceptance who will issue a 1024 bit cert is a problem. I need to find a way to generate a 2048 bit key-pair database file acceptable to NES 3.63 to use in generating a certificate request.
I tried using openssl to generate the csr using the same challenge password that we used with a previous self-signed certificate; the crt returned from the CA installed well enough but the server complains of a password mismatch when we try to start it. I have now built NSS 3.12.3 and NSPR 4.8.4 on that system; is there a utility and/or api from NSS which would help me in this effort? 'certutil' and 'symkeyutil' don't seem to grok the NES cert and key database files. All help is much appreciated. Michael -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
