CERTMIG tool

The HP Apache-based Web Server bundle includes the CERTMIG tool in binary form. The CERTMIG utility can be used to migrate iPlanet's certificates over to the HP Apache-based Web Server. It is built using the NSS version 3.2 source, and is an extension of the PK12UTIL utility provided by the Mozilla community. The NSS version 3.2 sources can be downloaded from NSS version 3.2 sources download

CERTMIG does not contain all components of NSS, but only the required components for converting iPlanet certificates, key translations and certificate chains to that of HP Apache-based Web Server. The Frequently Asked Questions for NSS can be found under: Frequently Asked Questions

See mozilla/security/nss/cmd/certmig for binaries, object and source. (see download instructions below for the sources)

The certmig program provides the following functionality:

1. Displays a list of certificates in the iPlanet Cert. database
2. Extract any public domain (CA) certificates from the database
3. Extract certificate and the corresponding keys in the PKCS#12 format (.. and other pk12util features)

License information for CERTMIG and Mozilla NSS 3.2

Some of the software in this bundle is licensed under the GNU General Public License and other open source or free licenses.

You may obtain a copy of the GNU General Public License Version 2 or later at the following locations:
http://www.opensource.org/licenses/gpl-license.html
http://www.gnu.org/copyleft/gpl.html
or see /opt/apache/ssl/bin/GPL_LICENSE for more information.

You may obtain source code for the CERTMIG software licensed under the GNU GPL from here:

The CERTMIG software contains cryptography and is therefore subject to US government export control under the U.S. Export Administration Regulations (EAR).

EAR Part 740.13(e) allows the export and re-export of publicly available encryption source code that is not subject to payment of license fee or royalty payment.Object code resulting from the compiling of such source code may also be exported and re-exported under this provision if publicly available and not subject to a fee or payment other than reasonable and customary fees for reproduction and distribution.This kind of encryption source code and the corresponding object code may be exported or re-exported without prior U.S. government export license authorization provided that the U.S. government is notified about the Internet location of the software.

The CERTMIG open source software available in this bundle is publicly available without license fee or royalty payment, and all binary software is compiled from the open source code.The U.S. government has been notified about this software as explained above.Therefore, the source code and compiled object code may be downloaded and exported under U.S. export license exceptions (without a U.S. export license) except to the following destinations under U.S. economic embargo: Afghanistan (Taliban controlled areas), Cuba, Iran, Iraq, Libya, North Korea, Sudan and Syria. This list of countries is subject to change.

You may not export or re-export the HP Apache-based Web Server software or any copy or adaptation in violation of any applicable laws or regulations.

Please be advised that this HP Apache-based Web Server software is subject to U.S. export regulations due to cryptography technology found in the product. A U.S. Department of Commerce Export Classification Decision has granted this product 'retail' status.Certain exports of 'retail' products from the U.S. must be reported to the U.S. Department of Commerce on a semiannual basis. Incorporation or bundling of this Apache product into another product may obligate an exporter to report the export of the bundled product as well. For complete details concerning the types of export transactions you are obligated to report and where to submit your reports please consult your legal counsel or the U.S. Department of Commerce, Bureau of Export Administration (http://www.bxa.doc.gov/Encryption/), and refer to the U.S. Export Administration Regulations (15 CFR Part 740.17(e)).

In addition, all software downloaded from this site or any copy or adaptation may not be exported, re-exported or transferred to or within countries under U.S. economic embargo including the following countries: Afghanistan (Taliban-controlled areas), Cuba, Iran, Iraq, Libya, North Korea, Sudan and Syria.This list is subject to change. This software or any copy or adaptation may not be exported, re-exported or transferred to persons or entities listed on the U.S. Department of Commerce Denied Persons List, Entity List of proliferation concern or on any U.S. Treasury Department Designated Nationals exclusion list, or to any party directly or indirectly involved in the development, production, distribution or stockpiling of nuclear, chemical, biological weapons or in missile technology programs as specified in the U.S. Export Administration Regulations (15 CFR 744).

By downloading software from this site, the customer confirms that they are not located in any country under U.S. economic embargo, not identified on any U.S. Department of Commerce Denied Persons List, Entity List or Treasury Department Designated Nationals exclusion list, and not directly or indirectly involved in the development or production of nuclear, chemical, biological weapons or in missile technology programs as specified in the U.S. Export Administration Regulations.