msg <nos...@nospam.nowhere> wrote in news:xns9dbd9d232636bnospamnospamnowh...@216.196.97.169:
> Greetings: > > The utility 'sec-key' bundled with Netscape Enterprise Server > 3.63 only generates 1024 bit keys; finding a CA with good browser > acceptance who will issue a 1024 bit cert is a problem. I need > to find a way to generate a 2048 bit key-pair database file > acceptable to NES 3.63 to use in generating a certificate request. > > I tried using openssl to generate the csr using the same challenge > password that we used with a previous self-signed certificate; the > crt returned from the CA installed well enough but the server > complains of a password mismatch when we try to start it. > > I have now built NSS 3.12.3 and NSPR 4.8.4 on that system; is there > a utility and/or api from NSS which would help me in this effort? > 'certutil' and 'symkeyutil' don't seem to grok the NES cert and key > database files. > > All help is much appreciated. > > Michael Further research suggests that the database files are in Berkeley DB 1.85 format and that there are tools available (such as db_dump and db_load) which might help. After a half day of web searching I have not found a repository for the tools (db_1.85 library is easy to find) and only one website that has html-ified versions of the source code. Searching the Oracle site has proven fruitless unless I want to install 2GB of some recent release. Does anyone have the Sleepcat Software Berkeley DB tools source code? Thanks, Michael -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
