Existing SSL Cert
I am trying to setup WS 6.1 to use SSL. I have an existing wildcard SSL cert that I am trying to use. When I attempt to install the cert I get an error saying that the private key cannot be found. Can I manually update the security datastore with the private key that was used when generating this cert?
Thanks,
Pete
[335 byte] By [
Peteresin] at [2007-11-26 8:16:37]

# 1
I have managed to find pk12util, which is supposed to allow one to import certs into the keystore. The problem is that when I try to run it I get the following error:
pk12util: PKCS12 decoding failed: security library: improperly formatted DER-encoded message.
pk12util: PKCS12 decode not verified: security library: improperly formatted DER-encoded message.
I deleted the database and created a new one and I still get the same error. What format does the WS use to create its datastore?
Thanks,
Pete
# 2
pk12util will export from a NSS database and import into a NSS database.
I am guessing that you are using the DER format of the certificate as input to pk12util for importing that certificate into the WS 6.1's NSS database.
Use pk12util to directly to export from the NSS database that you have the certificate in.
If the certificate store that you have your certificate in is not a NSS database then use whatever utility that comes with that store to export the certificate in PKCS12 format.
Then use pk12util to import that PKCS12 format file into WS 6.1's NSS database.