Certadmin is adding new SSL certificate with wrong name
I'm using certadmin to add a new certificate from Thawte. Did it successfully the past few years, but can't do it this year for some reason. It looks like everything is working, but when I go to look at the store after adding the cert it comes up with the same name as last year's certificate. For example,
portal.rhsmith.umd.edu u,u,u
portal_2003 u,u,u
portal_2003 u,u,u
server-cert u,u,u
...where portal_2003 is the name of last year's cert. Before running certadmin there was just one of 'em. The .nickname does change to the new name I entered in, but it doesn't get stored with that name and the gateway gets confused. Changing .nickname to portal_2003 lets the gateway start, but it's finding the old (about to expire) cert, not the new one I just bought. Any ideas, anyone?
Thanks for your help,
--Ernie
Solved my own problem... went in with ipscertutil directly and removed some old certificates. This seemed to uncorrupt the store and I was then able to add the certificate.
Similar Messages
-
New SSL certificate with 2048 bit shows error: (Fehlercode: sec_error_unknown_issuer)
installed a new SSL certificate with 2048 bit encryption (as is now required by issuer of certificate). Everything is OK with IE, FF shows error: (Fehlercode: sec_error_unknown_issuer)
== URL of affected sites ==
https://www.dongil.at/I have also tried all the solutions mentioned - but no luck.
I wrote to Geotrust support and the pointed out that I needed the intermediate certificate and provided me with this url:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=AR1422
Please note, this intermediate certificate was *not* the same is linked to above - seems like there are 2 different intermediate certificates, depending on what type of certificate you got from Geotrust.
Just to recap - if you got yourself a "QuickSSL, QuickSSL Premium or SSL Trial"-certificate (like me) then use this intermediate:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=AR1422
If you got a "True BusinessID or Enterprise SSL"-certificate, you should use this:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=AR1423
- Lasse -
New Ipods Engraved With Wrong Names
I recently bought ipods for my daughters, one black and one white. Unfortunatley, Apple reversed the names on said ipods and I'm lost as to what to do. Is there anyway that one can remove and switch the (back/front) plates with the names? Or do I send them back for new ones (I am unaware as to if the two-year warranty we bought with the ipods will cover this sort of situation).
Any help would be appreciated.
- pegasusWelcome to Apple Discussions!
Call apple...
http://www.apple.com/contact/phone_contacts.html
Merry Christmas
btabz -
I have installed a new SSL cert with associated chained root onto my SSL module.
The certificate and its chain have been verified by verisign as being ok.
The certificate handshake and exchange works fine on several other browser and OS combinations except FF. Unfortunately out customer base is heavily focussed on FF.
Working (old certificate)
https://eproc-europe.electrocomponents.com/emea/form-interface
Not working (new certificate)
https://eproc-americas.electrocomponents.com/amer/form-interface
Any assistance would be greatly appreciated
Regards
ChrisYou can try to disable libPKIX support in Firefox, but it is not recommended to leave it disabled on the long run for security and vulnerability reasons.
*<b>about:config</b> page: security.use_mozillapkix_verification = false
Note that support for the security.use_mozillapkix_verification pref to disable PKIX has been removed in Firefox 33. -
When I create a text message from my contact on my iphone 5, the contacts mobile number appears and not there name. But when they respond to my text, is shows up as a new text message with there name. How do I fix this?
Double click the home button and swipe up the messages app to stop it, then open the app again. This pretty much completely stops the process and freshly opens it again, resolving problems at times. I have had this happen before as well on my iPad, I get a banner, check messages, and nothing new is there.
If that doesn't work, close the app like suggested above, but then restart the phone by holding down the home and lock button for 10-15 seconds until the apple logo appears. -
I have gone to this website almost everyday for years and I have not changed anything in my internet settings, but now I'm getting this message: secure connection failed: The Certifying Authority for this certificate is not permitted to issue a certificate with this name. (Error code: sec_error_cert_not_in_name_space) The only thing I KNOW I did differently, was I installed a CAC reader to my computer, since then, this has been happening. Is there a setting I can change?? E-mail is: [email protected] Thanks! Megan
There were recently several users getting this error code who use AVAST 2015. If you recently got that program, please see:
* [https://support.mozilla.org/questions/1029578 Can NOT access https://www.google.com for google voice, mail etc.]
* [https://support.mozilla.org/questions/1028985 Avast Forum connection failed - works in Chrome etc.]
* [https://support.mozilla.org/questions/1028190 Since last FF update I can't sign out of Yahoo and when I close FF it tells me it has crashed.] -
Separator page prints out with wrong name when printing from Outlook 2010
Working with Windows 7 Enterprise, Outlook 2010. We've set up our desk printers to print a separator page with the user's name, as several people use the same printers in our building. Printing from IE, Word, etc. all work fine, and it'll print
out the correct username on the separator page.
When anyone attempts to print an Outlook email, it instead prints out my username. We've found that it doesn't happen if they click on the "quick print" button, but it happens every time if they do "file > Print" or Ctrl+P.Hi
As per the information and details provided by you that separator page prints out with wrong name when printing from Outlook 2010, please follow these steps: -
To create a custom separator page file, use a text editor such as
Notepad. On the very first line, type one single character, and then press
Enter. The character on this line defines the character used as an escape character. For example, the following list assumes that this character is the at sign (@).
Enter the escape codes for the functions you want, and then save the file with an .sep extension in the Windows System32 subfolder.
In the Print Manager, select the printer that you want to use the separator page file with, and then click
Choose Properties on the Printer menu.
Click
Details, specify the name of the desired separator page file in the
Separator File box, and then click OK.
Note:
Put the custom separator page file in one of the following locations:
In the %Windir%System32 folder.
In a folder whose path contains a SepFiles folder. For example:
Drive:\Folder\SepFiles\Subfolder
I hope this information will be helpful for you.
Thanks and regards
Shweta@G -
Icalender responce with wrong name
My calender sens a mail with wrong name when accepts meeting requests. How can I change that name?
Thanks in advance!ssstesoe,
Quit iCal/Calendar, then click on your card in Address Book/Contacts, then select Contacts>Card>Make This My Card.
If that is not successful, delete, and recreate your card. Then once again make sure to designate it "Make This My Card." -
CSS - 11506 - Adding New SSL Services on Single SSL Modules
Hi,
We are having one pair of CCS 11506 currently SSL services are running on slot4 with single SSL module.Now we are planning to add one more SSL application with different certificates & keys on different VIP.
Can we use the same slot4 for new application & using different certicates & keys on same SSL modules.Your reponse is appriecatedHi Sean,
Thanks for replying back just want few clarifcations in configuration part.
1. If new vlan is given for new application then how to point routes to the new vlan as default routes to exisitng vlan is already present.
2. I've prepare sample config template with details steps & let us know will it work & if changes is required kindly let us know.
1.# ftp-record ssl_record 192.168.19.21 johndoe "abc123"
/home/johndoe
2.# copy ssl sftp ssl_record import rsacert.pem PEM "passwd123"
Connecting
Completed successfully
3.# copy ssl sftp ssl_record import rsakey.pem PEM "passwd123"
Connecting
Completed successfully
4.Enter configuration mode.
# config
(config) #
4. To use RSA public key exchange and authentication:
a. Associate the imported RSA certificate with a file.
(config) # ssl associate cert myrsacert1 rsacert.pem
b. Associate the imported RSA key pair with a file.
(config) # ssl associate rsakey myrsakey1 rsakey.pem
5. Compare the public key in the associated certificate with the public key
stored with the associated private key and verify that they are identical.
(config) # ssl verify myrsacert1 myrsakey1
Certificate mycert1 matches key mykey1
ssl associate rsakey NEWKEY newkey.pem
ssl associate cert NEWCERT newcert.pem
!************************* INTERFACE *************************
interface 3/3
description "****WEB SIDE****"
bridge vlan _ID_X.X.X.X
bridge port-fast enable
interface 3/4
bridge vlan_ID_Y.Y.Y.Y
bridge port-fast enable
description "****PIX SIDE****"
!************************** CIRCUIT **************************
circuit VLAN_ID_X
ip address A.A.A.A B.B.B.0
ip virtual-router 2 priority 101 preempt
ip redundant-interface 3 C.C.C.C
ip critical-service 3 chk-con-pix_Y.Y.Y.Y
ip critical-service 3 chk-con-web_X.X.X.X
circuit VLAN_ID_Y
ip address D.D.D.D E.E.E.0
ip virtual-router 4 priority 101 preempt
ip redundant-vip 4 F.F.F.F
ip critical-service 4 chk-con-pix_Y.Y.Y.Y
ip critical-service 4 chk-con-web_X.X.X.X
!*********************** SSL PROXY LIST ***********************
ssl-proxy-list NEW
ssl-server 20
ssl-server 20 vip address F.F.F.F
ssl-server 20 cipher rsa-with-rc4-128-sha F.F.F.F 81
ssl-server 20 cipher rsa-with-rc4-128-md5 F.F.F.F 81
ssl-server 20 rsacert NEWCERT
ssl-server 20 rsakey NEWKEY
active
!************************** SERVICE **************************
service FRONT_SSL
type ssl-accel
slot 4
keepalive type none
add ssl-proxy-list NEW
active
service WEBSERVER-03
ip address G.G.G.G
redundant-index 3
protocol tcp
port 80
active
service WEBSERVER-04
ip address H.H.H.H
redundant-index 4
protocol tcp
port 80
active
service chk-con-pix_Y.Y.Y.Y
keepalive type script ap-kal-pinglist "N.N.N.N"
ip address J.J.J.J
keepalive frequency 2
keepalive maxfailure 2
keepalive retryperiod 2
active
service chk-con-web_X
ip address K.K.K.K
keepalive type script ap-kal-pinglist "P.P.P.P"
keepalive frequency 2
keepalive maxfailure 2
keepalive retryperiod 2
active
!*************************** OWNER ***************************
owner NEW
content BACKNEW_HTTP
vip address F.F.F.F
add service WEBSERVER-03
add service WEBSERVER-04
protocol tcp
port 81
url "/*"
redundant-index 5
no persistent
active
content FRONTENDNEW_SSL
vip address F.F.F.F
protocol tcp
port 443
application ssl
add service FRONT_SSL
active
content NEW
url "//www.ABC.com/*"
vip address F.F.F.F
protocol tcp
port 80
redundant-index 4
redirect "https://ABC.com"
active
your reply on this would be highly appericated. -
How to get Apex/EPG to use new SSL certificate
We have Apex 4.0.2 installed with the Embedded PL/SQL gateway (EPG) on Oracle 11.1.0.7.
We have successfully configured HTTPS with a self-signed certificate on our production and pre-production servers.
On our pre-production server we have successfully replaced the self-signed certificate with a CA signed certificate. To get Apex to use the new certificate we had to restart the database.
I would like to avoid restarting the database on our production server if possible.
Is there is another way to have Apex use the new certificate without re-starting the database?Jari -
That's good to know. I assume restarting the listener loads the new configuration too.
I found this knowledge base article which isn't specifically for Apex but is similiar:
How To Replace An Expired Or Expiring Certificate in Wallet Manager in Oracle AS 10g and FMW 11g [ID 303299.1]
The step after adding the certificate to the wallet is:
+10. Restart the component that uses the Wallet i.e Webcache, HTTP Server, or Database, as the Wallet is stored in memory and will not be re-read until the component is restarted+
That makes me wonder if there is a way to cause the Embedded PLSQL Gateway to reload the wallet short of restarting the database.
Any thoughts on whether issuing these commands might do that?
dbms_xdb.sethttpport(0);
dbms_xdb.sethttpport(8080);Thanks.
John -
Started new computer up with wrong itunes account how do i change it
Started new imac with wrong itune account. How do i change it?
Lunch iTunes - go to the Home page of the iTunes Store and select 'account' - you will get a dialog and you can log into your account.
MJ -
Wildcard SSL Certificates with MFE?
Is anyone using a wildcard SSL certificate on their mail server when using Mail for Exchange on assorted Nokia E Series mobiles please?
We currently use a straight SSL cert and MFE works with no problem, however I've been looking into getting a single wildcard SSL certificate for our domain.
Before doing anything I figured I'd try a website that used a wildcard certificate.
When I did this (using an E51) I got the message "Website has sent a certificate with a different website name than requested" and was prompted to accept once, permanently, or don't accept.
My question is whether this message would come up in a clear/obvious manner when using Mail For Exchange on a Nokia (so I can tell our users what to do when it does), and whether anyone has encountered issues using a wildcard with Nokias when using Mail for Exchange.
If anyone has an E-Series and is using a Wildcard cert can you let me know if you've encountered any issues please?
Thanks.This is interesting question. I look forward testing this myself
What kind of cert & website you used on your own tests? Was the cert something like *.example.com? And the domain, was it https://something.example.com or https://example.com ? AFAIK wildcard doesn't match addresses consisting domain part only, so the latter one might not work.
Help spreading the knowledge — If you find my answer useful, please mark your question as Solved by selecting Accept this solution from the Options menu. Thank you! -
In the process of setting up a new developer account, getting to step #2 & reviewing the personal information, the first & last name listed for my Apple ID is incorrect, however it is correct on the Apple ID settings page, as well as all of my iTunes billing information. How can this be updated? I don't want to create a developer account and be listed with the wrong name!
Please read before you post.
Contact [email protected] to investigate signup issues. -
New SSL certificate for M670 process?
Can someone help me with the current process for installing a new certificate on an M670 running 8.1.0-476? Do I still use OPENSSL to generate the private key, and then get the certificate signed and import the certificate via CLI, pem format?
Can I install a SAN certificate? I have one DNS name spam.domain.com for the two (internal and external) SPAM quarantine interfaces and another name mspam.domain.com for the management interface.
Appreciate the input, I only do this every three years and the process has changed the last two times and I find nothing in the documentation.
JasonJason -
You can use a SAN certificate - as long as the machine names are specified and signed off in the cert by your signer.
Had previous saved notes for similar questions in the past --- see if this helps:
For full create and install:
http://tools.cisco.com/squish/39054
Starting with AsyncOS version 7.1 it is possible to generate a self-signing request on the ESA appliance. This can be used as a workaround to create certificates for SMAs.
On an ESA, create a self-signed certificate that will be used for the SMA. This can be done under GUI: Network > Certificates
Detailed description how to generate a certificate can be found within the knowledge base article 1634.
It is important, when creating a certificate, for common name to use the hostname of the SMA (M-Series) and not of the ESA (C-Series), so that the certificate can be properly used. Submit and commit changes.
Use GUI: Network > Certificates > Export Certificates to export certificate.
Give it a file name (e.g. mycert) and password that will be used when converting the certificate. Exported certificate will be in .pfx format. The M-Series only supports .pem format for importing, so this certificate needs to be converted.
To convert certificate from .pfx format to .pem format, please use the following OpenSSL syntax:
openssl pkcs12 -in mycert.pfx -out mycert.pem -nodes
Windows version of OpenSSL can be downloaded from:http://www.slproweb.com/products/Win32OpenSSL.html Make sure Visual C++ 2008 Redistributable is installed first before the OpenSSL Win32.
Versions for Mac, Linux, and other operation systems can be downloaded from http://www.openssl.org/source/
After converting the certificate to the correct format, one should now have available both - the certificate and the corresponding key in .pem format. It is recommended to sign it by a trusted Certification Authority (CA). Cisco doesn't recommend a specific CA, this is up to the choice of the customer.
To have this signed, simply select "Download certificate signing request" in the GUI of the ESA (Network > Certificates >select the corresponding certificate created for the SMA) and submit it to the trusted CA of choice.
The signed certificate or the self-signed certificate, and the key in .pem format, can be imported now in the SMA. To learn how to do it, please use the corresponding Installing Certificates on an IronPort Email Security Appliance.
Let me know!
-Robert -
I purchased SSL certificate from GoDaddy for this website: www.mtnpine.com. This is a motel website with a reservation page. I want this page to have "secure" credit card entries for customers. GoDaddy now informs me that they only sold me the certificate but cannot help me set it up or script it into my website. Disappointing. Can anyone help me?
MariaNobody responded on this forum, so I called GoDaddy and got my answer.
Maybe you are looking for
-
The laptop I previously used to sync my iPod will no longer turn on. Is it possible to use a friend's computer and go on my iTunes and sync my iPod? She already has an iTunes account, so will it mess up her music and data?
-
Recently installed Amazon Uploader and Downloader, and downloaded MP3s from Amazon. My personal computer is connected via Internet to a corporate network; (corporate) SOPHOS and Malwarebytes Pro for virus protection. Recent scans show no infections.
-
JNI_GetDefaultJavaVMInitArgs returns 0, but no data
Platform is windows I've tried uninstalling reinstalling and upgraded to 1.5.0_04. My path contains: C:\Program Files\Java\jre1.5.0_04\bin; C:\Program Files\Java\jre1.5.0_04\bin\client I've tried switching that second dirrectory to the other ones wit
-
Hi, I am creating a Returns Order by using function module SD_SALESDOCUMENT_CREATE. In this case, document flow for the newly created order is not updating correctly (link for the Outbound delivery and Invoice is not updated). But, when I create retu
-
On the App Store they say the apps are free but when I go to install them it says about I have to purchase them but its. Only just started doing it and not sure how to resolve it