10.5.8 generating a 2048bit cert for signing is failing

in server admin i make a new cert, set the bit length to 2048 (default is 1024) and save. upon save the bit length reverts to 1024 and so when i submit it for renewal i get a kickback from godaddy who now requires 2048 bit length keys.
how can i do this? anyone have similar exp. or ideas??
thanks a lot.

fwiw i had to delete and make a new cert because even though server admin lets you change the bit length, the related keys are still 1024 and so it reverts. making a brand new cert with the same name and then doing a new csr worked in the end.

Similar Messages

How Do You Generate a 2048bit CSR for a Third Party SSL Certificate for LMS 4.0.1?

Our site requires Third Party SSL certificates to be installed on our servers. We have an agreement with inCommon. I have to supply a CSR in order to obtain the SSL certificate.
My installation is on a Windows 2008 server and I had the self-signed CSR already but it is only 1024 bits. Is there someplace in the GUI or OS where I can change the encryption?

This is a shot in the dark, but since CiscoWorks is using (I believe) Tomcat as the web server, could you run keytool to generate the CSR?
http://help.godaddy.com/article/5276
You could also use an online CSR gererator such as:
http://www.gogetssl.com/eng/support/online_csr_generator/
The key (pun intended) is having the private key on your server so that when you get the signed certificate and install it (using sslutil) it will be usable.
Hope this helps.

$99 Digital Cert for Signing Air Apps

I came across this today when looking @ CAs...
http://www.globalsign.com/developer/code-signing-certificate/promotion.htm
I noticed that globalsign is listed in accepted Cert Auths in
FireFox -- looks to be a good deal...
(No, I don't work for them and I'm not affiliated with them
;o)
Purchasing mine now...
Though this might help others...

I came across this today when looking @ CAs...
http://www.globalsign.com/developer/code-signing-certificate/promotion.htm
I noticed that globalsign is listed in accepted Cert Auths in
FireFox -- looks to be a good deal...
(No, I don't work for them and I'm not affiliated with them
;o)
Purchasing mine now...
Though this might help others...

Using keytool to generate self signed cert. for Microsft Certificate Mrg.

Hi All,
I want to be able to generate a self signed certificate that I can Import into
Microsoft's Certificate Manager, to enable an HTTPS Listener for
Microsoft's WinRM and WinRS.
The certificate would only be for internal use, not used externally.
Here's the problem. I can create a certificate using this (path obscured):
"C:\Program Files\.....\jre\bin\keytool" -genkey -al
ias dMobX -keyalg RSA -keysize 1024 -sigalg SHA1withRSA -dname "CN=your-f5c57803
53" -keypass changeit -validity 90 -storetype pkcs12 -keystore "C:\Program Files
\......\jre\lib\keystore\.keystore" -storepass changeit
"C:\Program Files\......\jre\bin\keytool" -export -alias dMob
X -file "C:\Program Files\......\jre\lib\keystore\dMobX.cer" -stor
etype pkcs12 -keystore "C:\Program Files\.......\jre\lib\keystore\.
keystore" -storepass changeit -v
Microsoft's Certificate Manager will accept it, the .cer, using "Import", into
Trusted Root Certification Authorities, but when I run the command to create the HTTPS Listener, I get this error message:
The WS-Management service cannot find the certificate that was requested.
If I use another tool, like selfssl, I can generate a self signed certificate using:
selfssl /N:CN=your-f5c5780353 /K:1024 /V:90 /P:443 /T
This will populate a certificate in Trusted Root Certification Authorities,
and when I run the command to create the HTTPS Listener, it succeeds with
no problem.
So my question is, am I doing something wrong with keytool, or are there
extra steps that I need to take, or is it even capable of generating a "self signed
certificate" that will work in the above case?
There are some concepts involved, certificate wise, that I'm not sure about.
Do I need to create a CSR and use a tool like openssl, as a CA, and
use the resulting certificate?
I just want to be able to programmatically create the needed certificate using keytool, or
using an API.
Thanks,

Download the latest JDK on http://download.java.net/jdk7/binaries/.
Run "keytool -genkeypair -ext KU=? -ext EKU=? ...". Substitute the "?" with the usages you see in the other cert (for example, "digitalSignature" or "codeSigning". If there are multiple ones, separate with comma).

How to generate a SSL certificate for Adobe Connect?

My organization uses adobe connect across the internet and we
would like to enable SSL on the server. I have instructions for
enabling SSL once a CSR is generated, but I do not know how to
actually generate the CSR using Adobe Connect.
Any info on how to generate a SSL CSR would be great,
thanks.

There is no 'built-in' method in Connect to do this. We used
a open-source product called OpenSSL to generate our CSR file for
Connect. Just Google OpenSSL and download/install it (it's free).
Then use something like this command for creating a cert:
openssl
req -new -key <exisiting private key file> -out <csr
file you want to make>
Example:
OpenSSL> req -new -key privatekey.pem -out connectcert.csr
After you get the new certificate from the CA, put in
d:\breeze directory. Then update the adaptor.xml file with the new
cert name (make sure backup the existing file).
Make sure you REBOOT the server to enable changes! Simply
restarting services will not work.
Hope this helps!

Using internal SSL Certs for Webview and Reskill (ICM 7.2.X)

Hi,
I would like to use corporate ssl certs for webview and reskill to avoid the user having to install the self signed certificate on the local machine. Has anyone any experience of this? Can it cause any unforseen problems?
My plan for webview is to create the certificate request in IIS for the default website, use this csr to generate the cert, then complete it by uploading the certificate.
For reskilling, I will assume I will have to do some command line stuff here ...
eg: keytool -genkey -keyalg RSA -keystore hostname.key
to create the key,
keytool -certreq -keyalg RSA -keystore hostname.key -file hostname.csr
to create the csr, and
keytool -import -trustcacerts -alias tomcat -file hostname.cer -keystore hostname.key
to import the new cert
Suggestions or comments for anyone who has tried this before would be appreciated.
Regards,
Brian

I've never done it on a version so old, but at the end of the day it's just IIS and Tomcat and importing an SSL cert is very standard.
david

SecurityException: Cannot set up certs for trusted CAs

I'm pressed for a solution to meet a delivery deadline - any help would
be appreciated.
I have a method that requests an instance of a SecretKeyFactory. The
method works in a standalone application and in JRun which we use for
development but when i try it in iPlanet iAS6 SP2 I get the following
Exception listed below. (following the Exception is the code that
generated it).
java.lang.ExceptionInInitializerError: java.lang.SecurityException:
Cannot set up certs for trusted CAs
at javax.crypto.b.<clinit>([DashoPro-V1.2-120198])
at
javax.crypto.SecretKeyFactory.getInstance([DashoPro-V1.2-120198])
at
com.intellisales.shared.services.DESede.generatePrivateKeyFromFile(DESede.java:151)
at
com.intellisales.shared.services.DESede.<init>(DESede.java:60)
at
com.intellisales.gbsld1.servlets.BellServlet.doGet(BellServlet.java:169)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:865)
at
com.netscape.server.servlet.servletrunner.ServletInfo.service(Unknown
Source)
at
com.netscape.server.servlet.servletrunner.ServletRunner.execute(Unknown
Source)
at com.kivasoft.applogic.AppLogic.execute(Unknown Source)
at com.kivasoft.applogic.AppLogic.execute(Unknown Source)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at java.lang.Thread.run(Thread.java:479)
java.lang.ExceptionInInitializerError: java.lang.SecurityException:
Cannot set up certs for trusted CAs
at javax.crypto.b.<clinit>([DashoPro-V1.2-120198])
at
javax.crypto.SecretKeyFactory.getInstance([DashoPro-V1.2-120198])
at
com.intellisales.shared.services.DESede.generatePrivateKeyFromFile(DESede.java:151)
at
com.intellisales.shared.services.DESede.<init>(DESede.java:60)
at
com.intellisales.gbsld1.servlets.BellServlet.doGet(BellServlet.java:169)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:865)
at
com.netscape.server.servlet.servletrunner.ServletInfo.service(Unknown
Source)
at
com.netscape.server.servlet.servletrunner.ServletRunner.execute(Unknown
Source)
at com.kivasoft.applogic.AppLogic.execute(Unknown Source)
at com.kivasoft.applogic.AppLogic.execute(Unknown Source)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at java.lang.Thread.run(Thread.java:479)
public SecretKey generatePrivateKeyFromFile(){
FileInputStream pfis = null;
SecretKey seckey = null;
try {
Security.addProvider(new sun.security.provider.Sun());
Security.addProvider(new com.sun.crypto.provider.SunJCE());
// *** get secret key ***
pfis = new FileInputStream(keyFileName);
byte[] encKey = new byte[pfis.available()];
pfis.read(encKey);
pfis.close();
SecretKeyFactory mykeyfac1 =
SecretKeyFactory.getInstance("DESede");
DESedeKeySpec dk = new DESedeKeySpec(encKey);
seckey = mykeyfac1.generateSecret(dk);
byte[] key = seckey.getEncoded();
} catch (Exception e){
e.printStackTrace();
return seckey;
}// end generatePrivateKeyFromFile
Thanks

hi,
I am using trying to Jar an application that uses the
JCE
package for encryption.
When running the jar file the following exception
ocurss:
java.lang.ExceptionInInitializerError:
java.lang.SecurityException: Cannot set up certs for
trusted CAs
at
at
at javax.crypto.b.<clinit>([DashoPro-V1.2-120198])
at
at
at
t
javax.crypto.Cipher.getInstance([DashoPro-V1.2-120198])
at
at
at
t
com.portland.encryption.Decrypter.decryptServer(Decrypt
r.java:67)
at
at
at
t
com.portland.util.ModelLoad.loadObj(ModelLoad.java:53)
at
at
at
t
com.portland.setup.SetUpInit.isUserFrameNeeded(SetUpIni
.java:86)
at
at
at
t
com.portland.setup.SetUpInit.checkResources(SetUpInit.j
va:29)
at
at
at
t
com.portland.setup.SetUpInit.main(SetUpInit.java:99)
Exception in thread "main"
Is there any way arround this problem???A few questions for you:
(1) Have you updated the java.security file to include the SunJCE security provider i.e. :
<JAVA_HOME>/jre/lib/security/java.security
a line should be added into this file as such:
security.provider.n=com.sun.crypto.provider.SunJCE
, where n is the the order of which the security providers to be installed.
(2) You should have all the necessary .jar files for the JCE packages and it should located in this directory:
<JAVA_HOME>/jre/lib/ext
Some developers make the mistake of copying the .jar files into the <JAVA_HOME>/lib directory.
HTH.
Allen Lai
Developer Technical Support
SUN Microsystems
http://www.sun.com/developers/support/

ACE 4710 in failover - ssl offload, cert for second ACE

Hi,
I'm testing two ACE 4710 appliances that should work in active/standby mode and do ssl offload in bridged mode.
At the moment I have configured one of the devices to do basic load balancing (without ssl offload).
Now I would like to move further and configure ssl offload and configure High availability.
I read that the certificate for ssl can be localy generated on the ACE device but I couldn't find any information regarding the cert that should be used on the second ACE.
Should I generate a new cert od the standby unit or somehow use the one on the first ACE?
Is it better to first set up high availability and then configure ssl offload or vice versa?
Does anyone have a config example of ssl offload and active/standby configuration?
Thank you in advance.

You simply need to generate keys & CSR on the primary ACE. Export the Keys from Primary ACE, Import these keys to Standby ACE and once you recieve the certs from CA then simply import the cert to both ACEs.
FOllowing will be steps to achive that
On primary Ace
1. create RSA Keys
crypto generate key 2048 app1.key
2. Create CSR & send it to CA
ace/Admin(config)# crypto csr-params app1-csr
ace/Admin(config-csr-params)# common-name www.app1.com
ace/Admin(config-csr-params)# country US
ace/Admin(config-csr-params)# email [email protected]
ace/Admin(config-csr-params)# locality xyz
ace/Admin(config-csr-params)# organization-name xyz
ace/Admin(config-csr-params)# organization-unit xyz
ace/Admin(config-csr-params)# state CA
ace/Admin(config-csr-params)# serial-number 1234
ace/Admin(config-csr-params)# end
ace/Admin(config)# crypto generate csr app1-csr app1.key
(copy the result to a file)
4. Import certificate recieved from CA
crypto import terminal app1.cert
(pasted the content from the cert)
5. verify the cert & keys match
crypto verify app1.key app1.cert
6. Export the keys from Active
crypto export app1.key
(copy the result to a file)
ON Standby ACE:
1. Import the keys
crypto import terminal app1.key
2. Import the cert
crypto import terminal app1.cert
3.verify the cert & keys match
crypto verify app1.key app1.cert
Hope this helps
Syed

Generate xml source file for Oracle Order Capture Print Quote

Hi,
I am new to xml and need to work on creating templates for Print Quote.
I am trying to generate the xml source file for which I enabled the report in system administrator and set the output to XML and assigned to Quoting Reports responsiblity. I then assigned XML Report Publisher to the same responsiblity.
I ran the report (Print Quote) and then I am trying to run the XML Report Publisher but I cannot get the request id in the list of values.
I am able to generate xml source file for other reports like Printed Purchase Order etc.,
The view output for the (Print Quote) report is as follows:
<?xml version="1.0" ?>
- 
<ASOPQTER />
How do I get the xml source file? Or are there seeded templates that I can use to create more templates? Any help would be appreciated. Thanks Ravi

Hi, I am in the same position - did this issue ever ger resolved by anyone. I have done a few XMLP reports successfully now using the Word add-in, but customising the Quote output differs from other standard reports.
If you look at the data definition for Quote it is a 'dummy' definition and has no XML file attached. Does anyone know how I can get the XML format for the report output?
Also the template uses XSL-FO ?!?!?! rather than RTF - not sure how to work with this, the Oracle docs are not very helpful in this regard either.
Has anyone successfully managed to customise the Quote print report? Many thanks,
Roger

Unable to generate "Export data source" for Master data infoobject

Hi Gurus,
I'm in BW 3.5
I need to generate "Export data source" for a master data info object.
I followed below steps:
I ticked the checkbox "Characterist. is export data source" in the master data Info object maintenance screen.
In the Infosource area, for the desired Infoobject --> Right click --> Generate export datasource --> a dialog box displays saying "The generation of DataSource was successful"
Problem:
Even after refreshing, etc.. I couldn't find the generated datasource 8**** for the above master data. I also tried to replicate the datasource from the myself source system, but couldn't find it even there. I don't know where the generated export data source is hiding ???
Could anyone please help ????
Thanks,
Venkat

Hi Venkat,
I guess that after creating an export datasource for infoobject this DS should appear in the RSA1-Source systems - MYSELF - datasource overview (with name starting with 8). Since it's a datamart, it should appear also as system generated infosource. And in this case you would be able to assign in URs of data target the appropriate infosource (make sure that in Infoproviders tab of RSA1 you have inserted your infoobject as a data target).
However, there are some bugs related to export data source. CHeck if you see you export data source in RSA6.
If you don't see it - consider applying OSS Note #816892 - "30BSP26: Export DS for master data is not generated".
Note #876845 - "30BSP29: InfoObject change: Export DataSource not adjusted" is also may be useful.
-Vikram

I am unable to generate a Dunning Proposal for Promise to Pay items

Please advise how or if its even possible to generate a dunning proposal for overdue Promise to Pay items. Currently after debugging I find that the Dunning Proposal filters out any items that are from open promises. Is there a way to generate the dunning proposal for promise to pay items that are overdue? I'm using ECC 6.0 EhP 4.0 PSCD module

Within SPRO there is some config to define a dunning block for a promise to pay. I would suggest you check here.
FSCM >> Collections Management >> Int with AR >> Promise to Pay >> Make settings for Promise to Pay.
If this does not work, I would assume this is because you are using FI-CA and the config is slightly different.

How to generate Header and Trailer for a file

Hi Guru
How can we generate header and Trailer for a file
EX:
i want to generate header with date and trailer with record count from table.
Sample file :
20120120
fwsfs
adfwsfd
adff
afsadf
afdwsg
adgsg
adgsgg
asgdsag
sdgasgdaf
sdfsagfadf
10

Hi ,
1.Create an interface to load data from oracle to file and set generate header as false option in IKM .
2.Create variable get_current_date of alphanumeric datatype and implement logic SELECT to_Char(SYSDATE,'yyyymmdd') FROM DUAL under refreshing tab
3.Create variable get_record_count of numeric datatype and implement logic SELECT '<%=odiRef.getPrevStepLog("INSERT_COUNT")%>' FROM DUAL under refreshing tab
4.Create a package
Drag the get_current_date variable ,
Drag odioutfile and paste the below logic OdiOutFile "-FILE=D:\ODI_TEST\emp.txt" "-CHARSET_ENCODING=ISO8859_1" "-XROW_SEP=0D0A" #GET_current_date in command tab
Drag the interface
Drag another variable get_Record_count
Drag the odioutfile and paste the below logic OdiOutFile "-FILE=D:\ODI_TEST\emp.txt" -APPEND "-CHARSET_ENCODING=ISO8859_1" "-XROW_SEP=0D0A"
#GET_RECORD_COUNT in command tab
Link all these in sequence,save and run the package.
OR Modify the IKM SQL to File Append to achieve same functionality.
Thanks,
Anuradha

How to Generate a Java file for a JSP Page

Hi ,
I am using weblogic11 .
I am working on a JSP page which nearly consists of 4000 lines of code.
I need to debug the file , but weblogic server is not generating the java file for the JSP pages .
Please let me know how can i genertae Java file for the jsp pages ??

JSPs are compiled into servlets automatically and those classes are stored in WEB-INF/classes folder. Servlet engine handles servlets.

1809: An error has occured while generating a seccion key for encryption

Hi
I am trying to perform a remote control operation using Console One
1.3.6c, but evry thime getting the following error message
"1809: An error has occured while generating a seccion key for
encryption." I had looked for it in Novell site & found that the fix is
to upgrade to ZDF 6.5 SP1, but I am looking for a diffrent work around
for it. Please let me know is there any work around for this problem.
Regard
Kallol
kallol

kallol,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

How to configure to generate two accounting documents for Mvt 645

Dear Experts,
I read all documents related to STO one-step procedure (mvt 645). They said that the system generate two accounting documents for 2 company codes (receing and issuing company codes) after goods issue reference to DO.
However, after configuration one step procedure and test my system, the system only generated one accounting document for receiving company code, not for issuing company code. In Material document, I saw 2 Mvt 645 and 101. In the lines having Mvt 645, I saw G/L account of cost-of-goods-sold.
Could you please to show me how to generate two accounting documnets automatically after goods issue referent to DO with Mvt 645?
Thank you so much,
Best regards,
Anh Duong

My configuration steps are:
Step 1: preparation:
create customer and vendor master
extend sales & purchasing views for material master
Step 2: Assign customer number and the organizational units (sales organization, distribution channel, and division) to the Supplying plant and Receiving plant
IMG --> Materials Management --> Purchasing --> Purchase Order --> Set up Stock Transport Order --> Define Shipping Data for Plants
Step 3: tick on column "One step" for the line of supplying, receiving plant, and PO type cross transport order
IMG --> Materials Management --> Purchasing --> Purchase Order --> Set up Stock Transport Order --> Assign Document Type, One-Step Procudure, Underdelivery Tolerance
Step 4: assign delivery type NLCC for PO type cross transport order
IMG --> Materials Management --> Purchasing --> Purchase Order --> Set up Stock Transport Order --> Assign Delivery Type and Checking Rule
These above steps are in MM module.
Please help me,
Thank you,
Anh Duong

10.5.8 generating a 2048bit cert for signing is failing

Similar Messages

Maybe you are looking for