WLC: which software-version support SHA2 certificates for Web Authentification and Web Management ?

Hello,
I tried to install new SHA2 3th-Party certificates on our WLCs. There are old WiSM1-Boards and 2504 to support our old 1230 Access Points, running 7.0.251.2, which didn't install it, although the config manual for 7.6 and 8.0 say that SHA2 certificates are supported since 7.0.250.0. When I tried to install the SHA2-certificates I get the message "File transfer failed" an the log says:
*TransferTask: Dec 12 13:22:14.394: #UPDATE-3-CERT_INST_FAIL: updcode.c:1869 Failed to install Webauth certificate. rc = 1
*TransferTask: Dec 12 13:22:14.394: #SSHPM-3-KEYED_PEM_DECODE_FAILED: sshpmcert.c:4085 Cannot PEM decode private key
I tried to install the same certificates on our WiSM2-Boards, running 7.4.121.0 and I failed too. The same certificates could be installed on a 2504 running 8.0.100 without any problems.
In all 3 cases I tried to install unchained certificates for web management and Level 3 chained certificates  for web authentication. I used the following guides to get the certificates (e.g. taken from the config manual 8.0.100):
http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/70584-csr-wlc-00.pdf
Which software versions support SHA2 certificates and which didn't ? Is the a list for it ?
Regards

Hello,
I solved the problem. First I used a Debian Linux system with Openssl 1.0.1. After I searched the internet using one of the log messages above I found sites which mentioned to use Openssl 0.9.x. So I tried a productive and security fixes Debian Linux System running Openssl 0.9.8 and I succeeded. The wlcs accepted the certificate files and used it after a reboot. The Web GUI still shows a SHA1 Fingerprint, but the certificate signature Algorithm is SHA2:
Signature Algorithm: sha256WithRSAEncryption
When you check the openssl.org homepage Openssl 0.9.8 is still one of the actual version of openssl and is still available and fixed. But the Openssl Roadmap says:
"We don't want to have to maintain too many branches. This is likely to include a timescale for the EOL of version 0.9.8"
I don't know the differences between certificates made with openssl 0.9.8 and 1.0.1. Is there anybody who can explain it to me ?
Regards

Similar Messages

  • Start Of Ramp-Up for SAP Portfolio and Project Management 5.0

    Start Of Ramp-Up for SAP Portfolio and Project Management 5.0
    Starting with this new release, the application SAP Portfolio and Project Management 5.0
    replaces both the SAP Resource and Portfolio Management (SAP RPM) application and the
    Collaboration Projects (cProjects) application.
    Start of ramp-up for SAP Portfolio and Project Management is 19th of April, 2010. The end
    of ramp-up is currently scheduled for 19th of October, 2010.
    Functional Innovations And New Features
    A detailed description of all new and/or enhanced functional innovations and features can
    be found in the Release Notes:
    [http://service.sap.com/releasenotes |http://service.sap.com/releasenotes]
      -> SAP Solutions
        -> Release Notes SAP Portfolio and Project Management
    There are some SAP Notes which are in general very important for SAP Portfolio and Project
    Management 5.0 and which also serve as central points of entry to find import information:
    SAP Note [1377104|https://service.sap.com/sap/support/notes/1377104]      FAQs - SAP Portfolio and Project Management 5.0
    SAP Note [1402912|https://service.sap.com/sap/support/notes/1402912]      PPM 5.0: Supported Browsers, Java versions, etc. 
    SAP Note [1411953|https://service.sap.com/sap/support/notes/1411953]      PPM 5.0: Configuration Content
    SAP Note [1436778|https://service.sap.com/sap/support/notes/1436778]      SAP Portfolio and Project Management 5.0: Restrictions
    Kind regards,
       Florian

    Thanks very much for taking the time to post the info Florian. I will update this thread as well if I run into any new information.
    Do we have any idea on SAP's direction for Product Definition? PD is still version 2.0 and I heard that PD functionality will be incorporated into PPM 5.0 which does make a lot of sense. I very briefly went through the notes and config doc in this post and did not get the impression that PPM has any idea and concept management capabilities.

  • Which database version supports replication for 120000 records/table

    Hello everyone,
    I am being asked about which DB version supports replication for the case where the number of records exceeds 120000 per table (probably more). I never used replication before so I can't give advice about it.
    Should SE one be used? SE, or EE?
    Advice please, if possible some references as well...
    yours

    Either version will support more than the number of rows mentioned above. With replication there are many choices but with Standard Edition, it becomes more limited. I worked for Quest Software and we have a product called SharePlex which is an Oracle replication tool which support both Enterprise Edition vs. Standard Edition. We even have a special pricing for Standard Edition as well.

  • I have MacBook 4.1 laptop with a Version 10.5.8 software. Does this software version support iCloud? Can this MacBook be updated to the latest software version?

    I have MacBook 4.1 laptop with a Version 10.5.8 software. Does this software version support iCloud? Can this MacBook be updated to the latest software version?

    Once you are at 10.6.8 Lion is still available from Apple. You will have to call Apple Customer Care 1-800-692-7753 or 1-800-676-2775. to purchase it. Then within 3 days you will get an email with a code which you can use to download Lion from the App Store.  The price is $19.99.
    Lion will require at least 2gb of RAM but really needs 4gb to run smoothly.
    As for third party programs see this list for compatibility with 10.7 http://roaringapps.com/apps:table
    Also Lion doesn't run any Power PC programs. To see if you have any Power PC programs go to the Apple in the upper left corner and select About This Mac, then click on More Info. When System Profiler comes up select Applications under Software. Then look under Kind to see if any of your applications are listed as Power PC. Universal and Intel will run under Lion.
    Before Mac switched to Intel processors in 2006 they used Power PC processors from 1994 to 2005. Power PC 601 through 604, G3, G4 and G5. Applications written for the Power PC processors need the application called Rosetta to run on Intel processors. This was part of the Operating System in 10.4 and 10.5 but was an optional install in 10.6. With 10.7 Lion Apple dropped all support for Power PC applications.

  • Which IOS version supported EEM?

    Hi
    May I know which IOS version supported EEM (Embedded Event Manager) ?
    we are using 2960 and 3750. Does c2960-lanbasek9-mz.150-2.SE5/c2960-lanbase-mz.122-35.SE5 support?
    hugo

    EEM supported on 3750:-
    http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-software-releases-12-2-special-early-deployments/product_bulletin_c25-614546.html
    But as leo said its not on 2960.

  • Is there a document about which safari version support h264?

    I used  http://html5test.com to test safari, and found that:
    some version of safari is not support h.264(as below image), and some is support h264.
    So i want to know is there a document about which safari version support h264 and which version is not support?

    Hi Claude,
    If you have market place user access, then go to the following link, which is the PAM of Data Services 4.2
    https://service.sap.com/sap/support/pam?hash=pvnr%3D67838200100900005703%26pt%3Dg%257Cd
    Anyhow also go through the PAM of Data Services 4.1
    http://www.sdn.sap.com/irj/boc/go/portal/prtroot/docs/library/uuid/50bf92df-e586-2f10-588f-95ff347211ba?overridelayout=t…
    In the above document, page 10, its mentioned SYBASE 15.7 is compatible.
    So probably for the latest version of data services, Sybase 16 should also be hopefully compatible.
    Once you get through the PAM of DS 4.2, do update here!!
    Regards,
    Mubashir Hussain

  • Which obiee version  supports windows 7

    which obiee version supports windows 7 ??
    Is there any patch available for obiee version 10.1.3.4.0 to supports windows 7 ??

    [email protected] wrote:
    which obiee version supports windows 7 ??None. Get a VM and install it under XP or Linux.

  • HT3775 hello guys, i m just wondering that which software would be the best for my macbook pro. whenever i try to open those video, it says '(video name)avi' cant open. that will be appreciable if anyone can help me out. thanks.

    hello guys, i m just wondering that which software would be the best for my macbook pro. whenever i try to open those video, it says '(video name)avi' cant open. that will be appreciable if anyone can help me out. thanks.

    I think that VLC Media Player will play avi files.
    Regards,
    Clinton

  • Which tomcat version  to be used for  jdk6?

    Hi
    Which jdk version is best compatible for Tomcat5.0? Can I use jdk6 ? Also tell me which is the most suitable tomcat version to be used for jdk6. Also tell me what are all the Tomcat settings (environmental variables etc.) to be made before running the web applications?
    Thanks in advance.

    I mean can i use tomcat5.0 with jdk6.Yes.
    The JVM you are using is pretty much irrelevant as long as it is above the minimum. For Tomcat5, thats JDK1.4 I think.
    The problem is not with JDK6, it will be with your understanding of Tomcat.
    but the programs i put in the web-apps folder with root directory(say firstapp) are not runningThe ROOT directory is the "default" web app. Not the place where you should deploy new web applications.
    All your web applications (with a WEB-INF directory in them) should be off the folder "webapps"
    [Tomcat 5 docs|http://tomcat.apache.org/tomcat-5.5-doc/appdev/deployment.html]
    Having said that, IMO you should be using at least Tomcat 5.5, and possibly even Tomcat 6 if you want the latest version.
    Cheers,
    evnafets

  • Recommended to upgrade WLC to software version 4.0.179.8?

    Hi Sir,
    I'm deploying a few WLC 4404-100 in a Mobility Group. They are installed with software version 4.0.155.5.
    I understand that the latest version is 4.0.179.8. Is it recommended to upgrade the WLCs to this version?
    Please advise.
    Thank you.
    B.Rgds,
    Lim TS

    Hi,
    I'm having a WLC 4404-100 running software version 4.0.179.8. Doing functional test now.
    Created a WLAN with 802.1x and WEP 104-bits.
    My wireless card is 3Com 3CRWE62092B. Windows XP SP2. Associated to the Lightweight AP and passed my EAP PEAP-MSCHAPv2 authentication with a backend Microsoft domain controller.
    The connection is fine. However, every about 15 minutes, XP prompts the username/password dialog box again. My connection is cut off until I re-authenticate.
    I never faced this problem before using Odyssey client previously with a WLC running software version 155.5.
    Please advise.
    Thank you.
    B.Rgds,
    Lim TS

  • Is there a manual I can PRINT for the Airport Utility Software Version 5.5.3 for Windows?

    Is there a manual I can print for the Airport Utility Software Version 5.5.3 for Windows?
    If there is, I can't seem to find it anywhere (in the Software, by using Google, etc).

    I dont' believe there were manuals out there for different versions of the utility. That would be quite a few different manuals.
    There are different manuals for the different base stations however...

  • Hello friends recently shifted from windows to mac need some suggestion on which software to go ahead with for editing, excel,power point presentation

    Hello friends recently shifted from windows to mac need some suggestion on which software to go ahead with for creating word editing, excel,power point presentation.

    Only Microsoft's Office for Mac 2011 14.4.8 will work on your Windows Office files in their native document format. Anything else, and particularly Apple's Pages, Numbers, and Keynote will perform translation on open, and export. This can, and will, introduce differences to your original documents, especially when sharing with others in the Windows Office 2010/2013 applications.
    Here is my short list.
    Office for Mac 2011 v14.4.8
    LibreOffice (latest)
    The current iterations of Apple's Pages, Numbers, and Keynote are not what I would term business/professional grade applications. Apple updates them infrequently, ignores user friendly features, omits others, and has introduced default backwards incompatibility between Yosemite and prior OS X releases of these applications. Read the reviews in the OS X App Store. Even for free with a recent Mac purchase, these products will transform your mood.
    The free LibreOffice is aggressively developed and designed as an MS Office replacement suite. There are occasions where it can open documents that Office for Mac, and Apple's products ignore. Extensive PDF manuals for the individual applications. Unlike Word, you can have two-up page viewing with a button click, or edit multi-page PDF. There is a forms designer. It can open nearly any document including MS Publisher and Visio documents from the Windows space. I use it.
    MS Office 2015 Preview for Yosemite is available, but as its title would suggest, it is not done yet, and some features are missing. I created a single-page Word document with a DRAFT watermark. Only LibreOffice v4.4.1 was able to open this document and preserve the watermark.

  • Poll: Which LabVIEW version do you use for new projects?

    I have posted a poll on the LAVA forums, here:
    Poll: Which LabVIEW version do you use for new projects?
    Thank you for taking the time to tell us your thoughts.

    I'm giving this thread a bump to remind eveyone that we want to know your opinion.  Please vote in our poll.
    Thanks,

  • I am using iphone 3gs and have accidentally clicked "update" to software version 5. However, after I failed and all my data was lost. I manage to restore back to my previous situation. But all my apps has been gone. How can I get back all my aps?

    I am using iphone 3gs and have accidentally clicked "update" to software version 5. However, after I failed and all my data was lost. I manage to restore back to my previous situation. But all my apps has been gone. How can I get back all my aps? I know I can get it by itunes but there are a few problems as below:
    1. I have jailed break my iphone and I never purchased any apps from itunes
    2. I have some important infomation saved in one of the apps called "awesome notes". How can I get it back? Is it store inside my computer? if so, how can i restore?
    3. I am using window 7
    I sincerely hope you guys can help me.
    Regards,
    Stephen Hong

    alrite. I have made my mistake. I should not jail break my iphone. So if I purchase my apps again from itunes is that mean mean my data will be back?
    I hope you guys can giv me some support here since I am Apple genuine buyer. I could be wrong last time and now I turn over a new leaf and learn a lesson.
    Please noted that I can always create new account to ask for the same questions without mention about "jailbreak" if I want to but obviously I won't do that. Please provide me your support! Thank you!

  • I got this error message when I want to activate the CS6. The error message is "We are unable to validate this serial number for CS6 Design and web Premium. Please contact "Customer Support ""

    I got this error message when I want to activate the CS6. The error message is "We are unable to validate this serial number for CS6 Design and web Premium. Please contact "Customer Support ""

    Hi islandschool,
    Please try the suggestion given in the link:- http://helpx.adobe.com/creative-suite/kb/unable-validate-serial-number-ccm.html
    Regards,
    Sarika

Maybe you are looking for

  • How do I manually import my profile from an XP machine to a Window 7 machine. I have the profile saved to a flash drive.

    <blockquote>Locking duplicate thread.<br> Please continue here: [[/questions/887658]]</blockquote> Nothing additional to post at this time

  • Spry menu problem - extra border

    I have used a spry menu bar vertical on my site. When the menu opens to the right upon rollover all links are there, however, there appears to be an extra border or box behind the pop out menu. I can email a screen shot of what it is doing. I appreci

  • Purchase Order - save data via BADI failed

    Hi all, I have created a zfield in a new tab at item level  of the purchase order that saved data into a custom table successfully. This is via BADI. However I like to save the zfield into ci_ekpodb which stored into EKPO.  In the function module tha

  • Manual for Macusers

    I have just bought Elements 12. I am a Mac user (iMac and Macbook) and I am searching for a manual Photoshop Elements 12 specially for the Mac. Elements 12 for the Mac has no Dutch version, so I have the English version. I have a manual but that is m

  • Unable to kill X using Catalyst drivers

    My problem is that once I'm in X I can't drop back to the console.  The computer starts in console and then I start X manually with "startx".  That all works but once I'm there, I can't back out.  I'm using XFCE and I've tried ctrl+alt+F2-F6.  That j