"bad database" trying to export cert key pair with pk12util on WS7

I'm trying to export the self-signed cert pair from my web servers.
root@sasbews21 # ls -al
total 450
drwx------   2 webservd webservd    1024 Apr 16 14:54 .
drwxr-xr-x 11 root     root         512 Apr 16 14:53 ..
-rw-------   1 webservd webservd   65536 Apr 21 13:46 cert8.db
-rw-------   1 webservd webservd    1527 Apr 7 15:00 certmap.conf
-rw-------   1 webservd webservd   14732 Apr 7 15:00 default-web.xml
-rw-------   1 webservd webservd     400 Apr 7 15:00 default.acl
-rw-------   1 webservd webservd   32768 Apr 21 13:46 key3.db
-rw-------   1 webservd webservd     160 Apr 7 15:00 keyfile
-rw-------   1 webservd webservd    1710 Apr 7 15:00 loadbalancer.xml
-rw-------   1 webservd webservd    1582 Apr 7 15:00 loadbalancer.xml.bak
-rw-------   1 webservd webservd    1284 Apr 7 15:00 loadbalancer.xml.example
-rw-------   1 webservd webservd     466 Apr 7 15:00 login.conf
-rw-------   1 webservd webservd     500 Apr 7 15:00 magnus.conf
-rw-------   1 webservd webservd     150 Apr 7 15:00 magnus.conf.orig
-rw-------   1 webservd webservd    9153 Apr 7 15:00 mime.types
-rw-------   1 webservd webservd    2069 Apr 7 15:00 obj.conf
-rw-------   1 webservd webservd    1436 Apr 7 15:00 obj.conf.orig
-rw-------   1 webservd webservd    2141 Apr 7 15:00 sasbews21.to.dot.state.fl.us-obj.conf
-rw-------   1 webservd webservd   32768 Apr 7 15:00 secmod.db
-rw-------   1 webservd webservd    2887 Apr 7 15:00 server.policy
-rw-------   1 webservd webservd    2788 Apr 16 14:53 server.xml
-rw-------   1 webservd webservd    5292 Apr 7 15:00 sun-loadbalancer_1_0.dtd
-rw-------   1 webservd webservd    7530 Apr 7 15:00 sun-loadbalancer_1_1.dtd
-rw-------   1 webservd webservd    7745 Apr 7 15:00 sun-loadbalancer_1_2.dtd
-rw-------   1 webservd webservd    5913 Mar 26 11:05 sunpasssecure.com.pem
-rw-------   1 webservd webservd    4241 Mar 25 16:18 sunpasssecure.com.pfx
-rw-------   1 webservd webservd    3896 Mar 26 11:14 sunpasssecure.com.pk12
-rw-------   1 webservd webservd    3292 Mar 26 11:53 sunpasssecure.com.v2.pem
-rw-------   1 webservd webservd    2328 Mar 26 14:25 sunpasssecure.com.v2.pk12
root@sasbews21 # certutil -L -d .
s1as                                                         CTu,u,u
s1as                                                         CTu,u,u
cert-sasbews21.to.dot.state.fl.us                            u,u,u
root@sasbews21 # pk12util -o cert-sasbews21.to.dot.state.fl.us.pk12 -n -d .
pk12util: function failed: security library: bad database.Thanks for any thoughts.
Steve Maring

to export the cert, you will need to provide the cert nick name for example
for example,
[sriramn@chilidev1]'config'>/sun/webserver7/bin/certutil -L -d .
cert-chilidev1.red.iplanet.com u,u,u
[sriramn@chilidev1]'config'>/sun/webserver7/bin/pk12util -o /tmp/tmp.expo -d . -n cert-chilidev1.red.iplanet.com
Enter password for PKCS12 file:
Re-enter password:
pk12util: PKCS12 EXPORT SUCCESSFUL
in your case,
cd /sun/webserver7/https-sasbews21.to.dot.state.fl.us/config
/sun/webserver7/bin/certutil -L -d .
/sun/webserver7/bin/pk12util -o <filename> -n cert-sasbews21.to.dot.state.fl.us -d .

Similar Messages

I have been trying to export a keynote powerpoint with voice over to quick time. It keeps crashing. Can anything be done?

I have been trying to export a keynote powerpoint with voice over to quick time. It keeps crashing. Can anything be done?

Can you explain this better, there appears to be a strange work flow going on, have you imported PowerPoint into Keynote or you are trying to export to PowerPoint?
There are many users who have trouble with a recorded voice over going to Quicktime.
Try this repair, its sorted out many similar problems in the past.
Complete all the tasks and in the order shown:
1 delete all the iWork applications if you have them, not just Keynote by using Appcleaner from Mac Update to           do this, its freeware
2 restart the Mac;   Apple menu > restart
3 immediately after the start chime, press the shift key until you see the Apple symbol.
         let it fully boot up, it will take longer as the OS is repairing the drive
4 when fully booted, go to Applications > Utilities > Disc Utility; click on the boot drive then First Aid tab and           click repair disc permissions
5 when complete, restart the Mac normally
6 install Keynote from the Mac App Store
Please report back to let us know if this helped.

I switched to the classic 'landscape' and when i reboot, it just stays at the greay screen, with the macintosh logo, and a blinking question mark. ive tried several methods of key combinations with rebooting etc.. i just bought this. please help.

i switched to the classic 'landscape' and when i reboot, it just stays at the greay screen, with the macintosh logo, and a blinking question mark. ive tried several methods of key combinations with rebooting etc.. i just bought this. please help.
I bought this off of craigslist with my christmas money, TODAY. i really need help, i have OS X experience from school, just not OS 9x. I need to reboot back to OS X asap. anything that may help is very appreciated. Thank You.
Chris.

Are you able to start up in Safe Mode?
http://support.apple.com/kb/HT1455?viewlocale=en_US
If this works you will see the normal desktop Once completely started up in Safe Mode, try to restart normally and go to Applications > Utilities > Disk Utility. Click on the top hard drive icon in the left sidebar and note the S.M.A.R.T. status at the bottom right of the pane. What does it say?
Select the named boot volume in the left sidebar, ("Macintosh HD" unless it has been renamed). What is the hard drive capacity and how much space remains available on it? Repair permissions on it.
See if you are able to do a little hard drive maintenance to help things out.

Can a link 5 usb key paired with hp's wireless elite keyboard?

Hi, I have a link 5 wireless mouse and a old hp's wireless elite keyboard. I don't know if they both use bluetooth or one is bluetootha and the other 2.4GHz or not. But can a link 5 usb key paired with a hp's version 1 wireless keyboard? If not, how can I get a wireless usb key for my hp wireless eilte keyboard?

Hello,
A Link 5 USB mouse can be used with some devices and HP has listed them at the following link:
HP Link-5technology liberates USB ports
HP also introduced new PCaccessories with HP’s exclusive Link-5 technology. Link-5 allows users to connect up to fiveHP-compatible PC accessories with one receiver, freeing up valuableUSB ports.
There are no drivers orsoftware to install. Users simply press the ”Connect” button on aLink-5 device to pair it with their PC. The wireless receiver then“remembers” all paired devices, making Link-5 accessories ideal forthose using a PC in multiple settings such as the home, office orother mobile locations.
Link-5 delivers reliableconnectivity using 2.4-GHz wireless technology and has anintelligent sleep mode to ensure the longest possible battery life.The latest Link-5 accessories lineup includes:
HP Wireless Mini Keyboard: Just the right mobile companion fora tablet or entertainment PC, this full-featured keyboard islightweight and ultra-small in size.
HP Wireless Ultrathin Wireless Keyboard: Offering a stylishlook and feel, this keyboard is durable, full-featured and a greatvalue.
HP Wireless Elite v2 Keyboard: Featuring a sleek, ultra-slimdesign, this keyboard offers superb performance and comfort.
HP Wireless Optical Comfort Mouse: Offering a comfortable,secure grip for use in the right or left hand, this mouse featuresan optical sensor with adjustable sensitivity that works on mostsurfaces.
HP Wireless Laser Comfort Mouse: Using a laser sensor withadjustable sensitivity, this mouse delivers optimal performance andworks on most surfaces.
HP Wireless Mobile Mouse: Designed for users who are on the go,this mouse delivers reliable wireless connectivity at a greatvalue.
It is only mention v2 not v1, so not sure if it will work. You should not be able to buy a key, because each device is sold with their specific usb receiver, so the answer is, you cannot get one, except if you buy a new part.
Thanks,
I work for HP! Please remember to provide and if this helped click ON

Trying to generate secure rpc key pairs with java

I see a couple of different classes that will generate public private key pairs in various algorithms for me but it doesn't appear that I can supply a pass phrase to use with these.
I want to write java code that will create a NIS+ secureRPC key pair for me.
thanks.

See now this is a really good question. I don't have an answer, but I really like seeing these types of questions here

Trying to export a movie compressed with H.264 out of AE

I am having some issues with exporting a movie compressed with H.264. I am using AE CS3. When I output with the settings of this image:
http://intuitionusa.com/ae.gif
I get an error message that is below in the image. I have to leave Quicktime in the top settings in the output module and then select H.264 in the format button. It allows me to render out, but a message appears saying it is better to select H.264 from the "format" dialog box.
* Also, when I export out to H.264 the file size is much larger than just using quicktime pro. I think it might be better to export an uncompressed file from AE and then use QT pro to compress but that is going to use up a lot of disc space.
SHoutzager

You're probably getting that error because of a frame size/codec conflict.
Your comp is 900x600, and the MainConcept codec is looking for a frame size of 720x480 (NTSC DV).
Using the Quicktime wrapper to export the H.264 is a fine optioin, however, AE will not do as good of a job compressing to that codec as Quicktime Pro, or a dedicated compression application would do. AE can only cache a limited number of frames for the compression process (frames before and after the current frame), and as a result, the compression quality and filesize will not be as small as they could be by using a different tool for the job.
As such, your supposition about rendering out an uncompressed/losslessly compressed movie and then running it through QT Pro (or another compression application) yielding superior results was a correct one.

Have you tried a Unicomp 122-key KBD with Arch?

The keyboard description is here: http://pckeyboards.stores.yahoo.net/122keyterkey.html
I'm considering the PC/5270 version, since according to the site it accepts "normal" PC keycodes, and if I'm understanding what I read in the Arch Wiki it should be little trouble to get it set up to suit me. Has anyone tried it? I'm not a gamer, so that isn't a factor for me.
Due to severe arthritis (RA) my fingers are stiff and a little jerky at times and I make a lot of false/wrong keystrokes with a modern soft-touch KBD - Ctrl/Alt/Shift combinations are especially difficult at times. I tried an old IBM Model M and it really helps, but the used one I found is a little glitchy due to age as was the one before it. I want to buy a brand new buckling-switch "clicky" KBD and was browing the Unicomp site when their 122-key version caught my eye. I've spent some time with the IBM version in the past and I really liked it. If I can get a new Unicomp to work well with Arch, I'll be elated, but I don't want to buy yet another keyboard I don't like or can't fully utilize.
Thank you for any light you can shed on the topic.
edited to add - I'm running 64-bit Arch, I don't think it matters but it might.
Last edited by Bob-Hur (2007-12-25 01:17:08)

I've handled/owned quite a few myself, but this one has a bad downarrow key and a few more keys that have intermittent problems. The box is a new Lenovo with good tight clean PS/2 plug receptacles so I'm not losing any connection integrity from jury-rigging adaptors ... I'm guessing it's the keyboard. It also turned out to be a "soft touch" instead of "buckling spring" kbd when it got here from the eBay seller and it would cost more than the refund I'd get to send it back. Some days you eat the bear, some days the bear eats you.
Ahhhh, no worries, I found a nice 1995 IBM Model M 82G2383 brand NEW in the original box from clickykeyboardss.com, it was $80 but it will likely outlast me. It doesn't have all those neato extra keys, but it's a bit cheaper, and it's a real IBM. Shame he didn't have any left in black ...
Thanks for the comments, and a Merry Christmas to all!

ERROR While Configuring the SSL Key Pair SAP NW 7.3

I am trying to create new key pair entry to use for SSL. I am getting weird error, after importing certificate response ssl-credential entry goes invalid.
Below are list of step I carried prior getting error.
1) Deleted existing Java key pair from existing view ICM_SSL_<Instance_ID>
2) Generated new pair entry
3) Generated certificate sign request.
4) Sent to SAP CA at SAP Trust Center Service at service.sap.com/tcs.
5) Import certificate request.
And ssl-credential entry turns red , with error"This entry expired"
Please see screenshot below

I am trying to create new key pair entry to use for SSL. I am getting weird error, after importing certificate response ssl-credential entry goes invalid.
Below are list of step I carried prior getting error.
1) Deleted existing Java key pair from existing view ICM_SSL_<Instance_ID>
2) Generated new pair entry
3) Generated certificate sign request.
4) Sent to SAP CA at SAP Trust Center Service at service.sap.com/tcs.
5) Import certificate request.
And ssl-credential entry turns red , with error"This entry expired"
Please see screenshot below

Export keyed footage with a Transparent BG ?

HI All,
It's been a minute since I've been over here. Been buried in Blender. LOL. I have forgotten how to export my keyed footage with only my actor on a transparent BG. Anyone? Maybe a screen grab to point out please?

I do not have that option for a drop down. Maybe I somehow (as you elude to) operator error? Here is two grabs and a recorder of my option here. The pics show vid switch ON in one, and BOTH with Transparency ON. The other is with the vid switch off to show transparency. The third pic are my options for Templates Edit>Output>

Error when export report to PDF with a none standard Windows font

Hi,
I got this error when trying to export PDF under VS2008 with an special true type font in the code behind. The error says:
...temp_9550ab94-02fc-4362-b259-cc6de8d6c04b {32E546F5-C6A3-44FC-B8EF-D5E37A1118FA}.rpt:\nOperation not yet implemented.
In the crystal reort under VS2008, I use a special font which is true type and it is already installed in the system, I can see the font in many other software like Word, Notepad, etc... without any problem.
Is anyone know how to fix it? please help.
Many thanks!!!
Lan

Hi Ludek,
I trid the SP, but doesn't work. I can send the font to you, it is only 50K. If you would like to try I can send it to you, but i am not sure how i can upload the font file. I guess any none Windows standard font will have same issue, i guess.
For now, i am going to give up and use image file instead.
Thanks,
Lan
Do you know if it is well-known issue in CR?
- No I do not.
where i can get any SP of CR for VS2008?
https://smpdl.sap-ag.de/~sapidp/012002523100009351512008E/crbasic2008sp1.exe
Runtimes for SP1:
CRRedist2008_ia64.msi
https://smpdl.sap-ag.de/~sapidp/012002523100006255262008E/CRRedist2008_ia64.zip
CRRedist2008_x64.msi
https://smpdl.sap-ag.de/~sapidp/012002523100006255272008E/CRRedist2008_x64.zip
CRRedist2008_x86.msi
https://smpdl.sap-ag.de/~sapidp/012002523100006255282008E/CRRedist2008_x86.zip
I would not mind testing this, but I need to know if there is a free download of this font available. I Googled the font name, but a quick search did not come up with anything.
Alternatively, you could try CR 2008 (12.x) and see if that will do the trick for you. An Eval of CR 2008 is available here:
http://www.sap.com/solutions/sapbusinessobjects/sme/freetrials/index.epx

Apple tv won't pair with macbook air

Apple TV 2 - trying to get it to pair with macbook air using bluetooth: The Apple TV continues to search with the spinning thing; the macbook air shows that it sees the apple tv, displays the 6 digit code that apple tv should then also display, but the apple tv just continues to search. After a few minutes, the macbook air returns a pairing failed statement. I've tried several times. I have rebooted both. Macbook air is now running OS X 10.10 Yosemite. Apple TV is showing version 7.0 (6897.5). Oh, I'm sitting 6 ft from the apple tv, but I moved to within 24 in and still same failure. Any help would be welcome. Thanks

As follow up, and for what it may be worth(likely not much), I talked to a staffer at an Apple Store the other day about this. He said this capability is meant for, and can only be used with a dedicated bluetooth keyboard. I tried this when I returned home, as my desktop iMac uses a bluetooth KB. I "unconnected" the KB from the iMac, then took it to the other room in an attempt to establish the bluetooth connection to the ATV. Still no success. And as I was attempting this, I realized that, with using the KB only, that is, no "attached screen" as with the Macbook air, I could not see how I could make a connection, because when I had previously tried to connect my Macbook Air, the Air screen was showing that it was attempting to pair with the ATV, and it displayed a 6 digit code that then was supposed to also be displayed on the TV screen attached to the ATV. If I continued to attempt to pair the dedicated KB only, how would this dedicated KB "with no screen" display a 6 digit code? So the mystery continues.

Thunderbolt wont pair with bluetooth devices

have tried to get it to pair with the following devices, with no success:
plantronics voyager pro (brand new)
LG HSB-200 headphones
these devices formerly all worked perfectly with our BB storm, LG 8000 series and droid I
please help!

Same problem here - my Thunderbolt will connect and disconnect repeatedly to my vehicle. I reached out to HTC and received this response:
Thank you for replying to my email concerning the connection between your Thunderbolt VIA Bluetooth to your vehicle. The Bluetooth stack in the Android Operating system for the Thunderbolt is different from the Bluetooth profile that is used for the Motorola [Droid] X. The device is not compatible with the Bluetooth of your BMW. There is not an option to force the device to stay connected if the device will not stay connected.
Unfortunately it looks like I'll have to take back this wonderful phone due to a silly issue like this

Exporting a move clip with alpha channel

Hi there,
I’m trying to export a move clips with alpha channel.
I’m trying to export an animation with Premiere CS5. I made an animation of a rotating object in Maya and exported it with alpha channel as tiff images. Then they are edited with Photoshop to give them a drop shadow.
My problem is this. Can I export this tiff animation with the alpha channel?
My plane is to use move clips over backgrounds in a game – depending on the result there are different animations playing on top of several different backgrounds. There for the objects has to have a transparent/alpha channel over the backgrounds.
Again the reason for this is the complexity of the game and to make the game looking as real as possible. I’m hoping for some help here to make my plan possible
…thanks

Thanks alot for the help.
But now I’m wondering how to get the file size down?
The 32bit and alpha channel just increase the file size from about 1MB to 9,3MB, which is pretty much??
…any ides mate?

Error while trying to export my database using this command

Hi,
I am trying to export my database using this command :
expdp system/manager@db1 full=n schemas=kul4231 dumpfile=kul4231_20091122.dmp logfile=kul4231_20091122.log directory=dump_dir1
Error:
Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
ORA-31626: job does not exist
ORA-31637: cannot create job SYS_EXPORT_SCHEMA_05 for user SYSTEM
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 95
ORA-06512: at "SYS.KUPV$FT_INT", line 600
ORA-39080: failed to create queues "KUPC$C_1_20091122101110" and "" for Data Pump job
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 95
ORA-06512: at "SYS.KUPC$QUE_INT", line 1606
ORA-01008: not all variables bound
DB version : Release 10.2.0.4.0
all ideas are welcomed!!!!!!!!!!!! let me know where am i going wrong!!!!!!!
thanks in advance..!!!!!!!!
venkat.

What is your SGA settings? (especially streams_pool_size).
You can try to bump streams_pool_size to 100M if your current setting is below that.
Regards
Tomasz K.

Cannot export private key: "key not valid for use in specified state"

Hi,
This is a bit of a long story but I hope someone can give us some guidance.
We use authentication certificates issued from our own Enterprise CA to control user and machine authentication via RADIUS/NPS for our wireless network. Certificates are deployed via group policy/autoenrollment. In general this works well but
we have an intermittent problem where user authentication stops working for a user who was fine before. The user certificate looks OK via Certmgr (shows as valid, shows that there is a private key associated with the certificate). The NPS server
logs show that the machine has been authenticated and granted access, but the user in this situation doesn't show up in the server logs at all.
The only solution in this case is to connect to the wired network and request a new certificate for the user (either via certmgr or just by deleting the duff cert and logging off/on again to get the cert via autoenrollment).
The interesting thing is that while a "working" certificate can be exported with no problem, a duff certificate cannot be exported with its private key, giving the error "key not valid for use in specified state". (Obviously the certificates
come from the same template, and the key is not marked unexportable). The key files are present in %userprofile%\Appdata\Roaming\Microsoft\Crypto\RSA and the user permissions on these files look correct.
After much searching of the forums I tried running certutil-repairstore on the duff certificate and that also returned the same error. I also tried an undocumented switch Certutil -user -key -v and again, got a very similar error "Loadkeys returned
key not valid for use in specified state. 0x8009000b (-2146893813)".
I'm assuming that the fact that the key is unexportable/corrupt is also the reason why the certificate can no longer be used for authentication.
Does anyone have any clues as to what might be causing this, and/or if a certificate with a key in this state can be repaired?
Thanks!

I can just share an experience I once had that was somewhat similar:
In this case certificates could sometimes not be enrolled and the CSP came up with a related error message.
The root was the software / driver (?) for a hardware dongle required to run some software. This "driver" added a registry key to the list of CSPs (under these HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider - but I have seen this with
XP, so the exact location might be different now).
This fake CSP entry that had quite a weird name effectively broke other CSPs. After removing the access to / generation of keys worked fine.
So it would be interesting to know if you run some software that is "close to CSPs or cryptography".
Elke

"bad database" trying to export cert key pair with pk12util on WS7

Similar Messages

Maybe you are looking for