|
Home > Archive > Netware Webserver > May 2005 > Import certificates
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Import certificates
|
|
| E Garcia 2005-05-18, 5:49 pm |
| I'm trying to import a certificate signed by an External CA and I'm
getting this pop-up error in C1:
Store Certificate Error
Failed to store the root certificate into the object SSL
CertificateDNS <servername>. Returned error code is -1,240
The Novell Certificate Server snap-in to the NetWare Administrator
or ConsoleOne could not parse the certificate or extract the
manadatory elements from the certificate.
I searched support.novell.com for the error code but couldn't find any
TIDs. Any help would be appreciated. Thanks.
| |
|
|
| E Garcia 2005-05-18, 5:49 pm |
| I got it from thawte.com.
| |
|
|
| E Garcia 2005-05-18, 5:49 pm |
| I may just have to contact them. Changed the format of the signed cert
from PKCS#7 to Standard Format now it is giving me -1,233 error.
http://support.novell.com/cgi-bin/s...i?/10095625.htm
I matched the last two lines it is exactly the same except the case of
the letters. Does that make a difference?
Anders Gustafsson wrote:
> E Garcia,
> Have you talked to them? I have never used them, only Digicert. Also
> see:
> http://support.novell.com/cgi-bin/s...i?/10077716.htm
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop
> Pedago, The Aaland Islands (N60 E20)
>
> Novell does not monitor these forums officially.
> Enhancement requests for all Novell products may be made at
> http://support.novell.com/enhancement
>
> Using VA 5.51 build 315 on Windows 2000 build 2195
| |
| E Garcia 2005-05-18, 5:49 pm |
| Maybe I should explain my environment. I'm using NES on NW5.1 SP7.
The server has two NICs. The server name is BETA and an alias WWW on
DNS. The 2nd NIC responds to http and https requests. I created to
KMO object and used WWW in subject for the CSR.
Could this be a problem? Does the KMO refer back the actual server
name BETA?
| |
| Anders Gustafsson 2005-05-19, 2:45 am |
| E Garcia,
> I may just have to contact them. Changed the format of the signed cert
> from PKCS#7 to Standard Format now it is giving me -1,233 error.
>
http://support.novell.com/cgi-bin/s...i?/10095625.htm
"This indicates that the signed certificate returned by VeriSign was for
a different KMO object than the one originally used for the Certificate
Signing Request (CSR)."
- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop
Pedago, The Aaland Islands (N60 E20)
Novell does not monitor these forums officially.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement
Using VA 5.51 build 315 on Windows 2000 build 2195
| |
| E Garcia 2005-05-19, 5:45 pm |
| I followed the TID's procedure, and the last two lines of my public key
and certificate I got from Thawte matches except the case of the
letters. My public key has upper case, Thawte has lower case. Does
that make a difference?
Anders Gustafsson wrote:
> E Garcia,
> http://support.novell.com/cgi-bin/s...i?/10095625.htm
>
> "This indicates that the signed certificate returned by VeriSign was
> for a different KMO object than the one originally used for the
> Certificate Signing Request (CSR)."
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop
> Pedago, The Aaland Islands (N60 E20)
>
> Novell does not monitor these forums officially.
> Enhancement requests for all Novell products may be made at
> http://support.novell.com/enhancement
>
> Using VA 5.51 build 315 on Windows 2000 build 2195
| |
| Anders Gustafsson 2005-05-19, 5:45 pm |
| E Garcia,
> Does
> that make a difference?
>
I have no idea, sorry.
- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop
Pedago, The Aaland Islands (N60 E20)
Novell does not monitor these forums officially.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement
Using VA 5.51 build 315 on Windows 2000 build 2195
| |
| E Garcia 2005-05-21, 2:45 am |
| Anders Gustafsson:
I resubmitted my CSR and got a new cert. I was able to import it to my
KMO.
> E Garcia,
> I have no idea, sorry.
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop
> Pedago, The Aaland Islands (N60 E20)
>
> Novell does not monitor these forums officially.
> Enhancement requests for all Novell products may be made at
> http://support.novell.com/enhancement
>
> Using VA 5.51 build 315 on Windows 2000 build 2195
| |
| Anders Gustafsson 2005-05-21, 2:45 am |
| E Garcia,
> I resubmitted my CSR and got a new cert. I was able to import it to my
> KMO.
>
Thank you for letting us know.
- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop
Pedago, The Aaland Islands (N60 E20)
Novell does not monitor these forums officially.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement
Using VA 5.51 build 315 on Windows 2000 build 2195
|
|
|
|
|