Switching from OpenSSL to GSKit
About this task
This section describes how to migrate your OpenSSL certificates to GSKit certificates.
The following is a list of certificate
formats that can be migrated to the GSKit format, KDB:
- PEM: Used by OpenSSL
- JKS: Used by Java and WebSphere Application Server
- PKCS12: Used by Microsoft applications and Internet Explorer
To migrate certificates, you may use one or more of the
following tools:
- gsk8capicmd: Native command line provided by GSKit
- openssl: Native command line provided by OpenSSL
- ikeyman: Optional graphical interface provided by GSKit
- keytool: Optional graphical interface provided by Java Virtual Machine (JVM)
Note: Be sure to backup your original certificates before
migrating them to GSKit format.
To migrate your certificates,
perform the following steps: