SSL Certs: SunONE 7 -> SJSAS 8

I'm trying to upgrade from Appserver7 to Appserver8 and need to upgrade SSL certificates.

It seems Appserver7 (SE) uses the old Netscape NSS cert8.db, key3.db database, whereas Appserver8 (PE) uses the (newer?) JKS format.

I seem to be able to export the certificate from Appserver7 using the certutil supplied with Appserver8, but I'm not sure how to export the private key from 7 so it can be installed on 8 so the associated certificate works.

To export cert:

cd /var/opt/SUNWappserver7/domains/domain1/.../config:

/opt/SUNWappserver8/lib/upgrade/certutil -L -a -n Server-Cert -d .

However I can't find a way to export the private key and then import it into SJSAS8.

Any ideas would be greatly appreciated.

[761 byte] By [tourtech] at [2007-11-26 10:54:30]
# 1

I ended-up using the upgrade process of the installer to do this, but it involved a slight modification. The main problem with this initially was that I was trying to upgrade a Standard Edition 7 server to Platform Edition 8.

So I installed Platform Edition 7 on another box, copied the SSL cert files from the Standard Edition 7 server to the PE7 box, and upgraded the PE7 to PE8.

During this process, the SSL certs were upgraded and converted to the new JKS format.

tourtech at 2007-7-7 3:07:24 > top of Java-index,Application & Integration Servers,Application Servers...