Hello.
I am in need of a method or script to convert iplanet digital certificates to current apache format (from .db to .crt files). I have searched around the forums and have only seen one way to do this, using the HP certmig utility, which would not work as I need to do this on Linux. Does anyone have any knowledge of a utility that can do this for a cert file migration from Linux iplanet to apache?

Thanks much,
Lou

Iplanet Webserver apparently uses what they call a "trust database" which is similar to those used in the Netscape webbrowsers. The docs I've read don't cater for cert extraction and IIGC the only tool recommended for working with those databases is Mozilla's certutil (see the "-L" switch). Also note this though: . Even though that was about SUN Solaris you didn't post any details so I don't know if that applies to your situation. It probably would be good for you to know what Iplanet version and O.S. was used before you make attempts. If all fails the only thing to do AFAIK is (have certutil) generate a CSR, details in the man page.

Thank you kindly for your detailed response.

We are on Red Hat Enterprise 4 and the IPlanet version is 6.0. We do have the certutil tool on our servers so it looks like we should go in this direction and will start testing rightt away.

When you state "to generate a CSR", does that mean that this type of output can be converted to .crt and .key files?

Thanks again,
Lou

No, please read what it says, not what you hope it says. It means you can buy a get-out-of-jail card. The CSR is what you supply on requesting a cert from the CA.