Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB)

2010-02-04 Thread David Stutzman
On 2/3/2010 11:56 AM, Anna Gellatly wrote: Thanks for the info David . When I run this command: /usr/java/current/bin/keytool -importkeystore -srckeystore /proximo/config/cluster/trusted.keystore -srcalias mykkey -destkeystore test.p12 -deststoretype PKCS12 and put in the destination password an

Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB)

2010-02-03 Thread Wan-Teh Chang
Hi Anna, I am not familiar with JKS keystore, so I'm afraid that I can't help much. It seems that exporting the private keys and associated certificates from JKS keystore into PKCS #12 files, and importing the PKCS #12 files into the NSS cert/key databases is the best approach. I hope that with D

Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB)

2010-02-03 Thread Anna Gellatly
y wrote: From: Anna Gellatly Subject: Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB) To: "mozilla's crypto code discussion list" Date: Wednesday, February 3, 2010, 9:56 AM Thanks for the info David . When I run this command:  /usr/java/current/bin/keytoo

Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB)

2010-02-03 Thread Anna Gellatly
: java.lang.Exception: Alias does not exist Can you explain a little more about "aliases" I am not sure I understand what they are doing? Thanks, Anna. --- On Wed, 2/3/10, David Stutzman wrote: From: David Stutzman Subject: Re: Converting jks to secmod.db (copying key/cert from JKS

Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB)

2010-02-03 Thread David Stutzman
On 2/2/2010 6:00 PM, Anna Gellatly wrote: Hello All - I'm very new to all this - forgive a potentially ignorant question. I believe have created a keystore with the following commands certutil -N -d . modutil -fips true -dbdir . So far so good... I am changing my application from using JKS

Converting jks to secmod.db

2010-02-02 Thread Anna Gellatly
Hello All - I'm very new to all this - forgive a potentially ignorant question. I believe have created a keystore with the following commands certutil -N -d . modutil -fips true -dbdir . I am changing my application from using JKS to NSS's keystore implementation for FIPS compliance needs. I h