Re: [389-users] Decrypting SSL for 389-ds

David Boreham <david_list@xxxxxxxxxxx> · Fri, 12 Nov 2010 09:27:07 -0700



    On 11/12/2010 9:21 AM, Gerrard Geldenhuis wrote:
    
      
        I
            created a new certificate datase with certutil, and I can
            view the private key fingerprints with certutil -d . -K but
            I can’t actually extract the private key from the certutil
            database. I can create a certificate sign request using
            certutil again. I thus have the private key but it is
            “hidden” from me.
      
    
    I bet there is a way to get the private key out, but I have no idea
    how (the very mention of certutil is giving me flashbacks..).
    Perhaps you can just create a key pair with openssl and import the
    pkcs bits into the NSS key store ?

    
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users