|
Home > Archive > Netware Webserver > January 2006 > Cert renewal for Apache
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Cert renewal for Apache
|
|
|
| Hello,
Not sure if this is the right forum. I have a cert from Thawte which has
worked fine but now must be renewed. It's a key material object in eDir and
the Apache conf file points to it for our Groupwise WebAccess server:
<IfModule mod_tls.c>
SecureListen x.x.x.x:443 "SSL Certificate WebMail"
</IfModule>
I cannot seem to renew this cert. After obtaining the renewal, the process
should simply be to click the Replace button within the key material object
properties and import the new cert. This is not working. The import
process wants a PKCS#12 format file. Using openssl, I have converted to
this format but upon import, I get this error:
"An error occured while importing the keys and certificates from the PKCS12
(PFX) file. The returned error code is -1,226."
Does anyone know what the problem is or how I go about troubleshooting?
This is for a Nw6.0sp5 server with Apache v1.03
Thanks,
Tony
| |
| thawte 2006-01-25, 7:58 am |
| Hi there Tony
Looking at the details you supplied, it appears that there could be a
problem with the .pfx file that you have.
What I advise is that you try to convert the latest certificate and the
private key to a .pfx file again and then import it into the MMC as
this will allow you to view the certificate in your IE browser. There
you can see if the private key is attached correctly and can then
export that copy to ensure you have a working PKCS #12 format file.
I have included a a link to assist in the conversion here:
http://search.thawte.com/thawte/solution.jsp?id=vs159
Should this not resolve the problem you experience, feel free to use
the Thawte support offered with your purchased certificate here:
www.thawte.com/support
Regards
Marshall
Tony wrote:
> Hello,
>
> Not sure if this is the right forum. I have a cert from Thawte which has
> worked fine but now must be renewed. It's a key material object in eDir and
> the Apache conf file points to it for our Groupwise WebAccess server:
>
> <IfModule mod_tls.c>
> SecureListen x.x.x.x:443 "SSL Certificate WebMail"
> </IfModule>
>
> I cannot seem to renew this cert. After obtaining the renewal, the process
> should simply be to click the Replace button within the key material object
> properties and import the new cert. This is not working. The import
> process wants a PKCS#12 format file. Using openssl, I have converted to
> this format but upon import, I get this error:
>
> "An error occured while importing the keys and certificates from the PKCS12
> (PFX) file. The returned error code is -1,226."
>
> Does anyone know what the problem is or how I go about troubleshooting?
> This is for a Nw6.0sp5 server with Apache v1.03
>
> Thanks,
> Tony
|
|
|
|
|