Certificate Formatting

I have to alter an existing system (using WebLogic 5.1 Server) to use certificates over SSL. The CA provides these certificates in PKCS#12 format (.pfx files) and I wondered if any-one knew of a method to get them into the PEM or DER format required for WebLogic.
This is so I can configure the following entries in the
weblogic.properties file :
weblogic.security.certificate.server
weblogic.security.key.server
Many Thanks,
Mark

i believe IE (browser) has an option in the Content/Certificates area which can import and export the certificate as well.
.paul
Alexander Petrushko wrote:
Mark Engstrom wrote:
I have to alter an existing system (using WebLogic 5.1 Server) to use certificates over SSL. The CA provides these certificates in PKCS#12 format (.pfx files) and I wondered if any-one knew of a method to get them into the PEM or DER format required for WebLogic.OpenSSL implementation has a PKCS12 proggie that will parse a PKCS12 certificate and write keys and certs out in PEM format. See www.openssl.org for more info.
Cheers,
Alex

Similar Messages

Certificate format support

Hi,
Does JSSE support PEM or CER certificate formats as well?
It is for Client-Side authentication.
Thanks,
Shai

Hi shaiw,
I'll start with my typical disclaimer. I have limited knowledge of JSSE -- about 7 days to be exact, so anyone is free to jump in if I'm wrong.
From my understanding, JSSE doesn't support PEM format, however it does support binary and base64 certificates (.cer). There doesn't appear to be a way to extract private keys from a Java KeyStore (JKS) using Java's keytool. So, while you can import binary/base64 public certificates for trusts, it may be necessary to create a CSR using the Java KeyStore, get it signed, and import it to the KeyStore. Then, during the SSL handshake, the client's private key can be used for pre master key negotiations, etc. (for client-authentication).
I've had success using some of the JSSE examples for server and client-authencation. In my case, I used a pkcs12 key and installed it into IE. Everything negotiated and went fine.

X509 certificate format

Hi,
I want to use certificate to identify my thin client hardware .Only thin client terminal who
have certificate will be able to use my server software functionality.
I want to issue them certificate on the basis of following information.
1.HW serial Number
2.processor type
3.OS
I am not able to understand what should be the Key Usage Type.
Further i am not able to understand where i will put the hardware information x509
certificate.
Please suggest me how a x509 certificate should look like.
What should be in the
Subject Name
Issuer Unique Identifier (Optional)
Subject Unique Identifier (Optional)
OID of my certificate (should it be a new OID)
subject alternative name
Regards,
Sunil

You really have complete control over what is in the certificate. Of course, whatever choice you make has to work with all the other software that needs to understand your certificate.
You could, for example, place all the information in the subject name. You could encode it all in the CN, or use the other standard fields as well. You can also use the subject alternative name extension exclusively. Or some combination.

QA Certificate Format

Dear All,
Our requirement of COA as below. We require multiple batches (max 5) will be print on the same page.
E.g.
Characteristic | UOM | Result | Specification | MOA
B1
B2
B3
B4
B5
Min.
Max
Where B1, B2, B3,B4 and B5 is 5 batches.
If no. of batches are more then 5 then it will go on second batch.
The reason of requirement is minimize the printing of Certificate. Sometime we have more then 15 batches, so we have to take printing of 15 batches.
Thanks in advance,
Nirav

This is controlled by the SAPscript. See a programmer about this.
FF

Certificate format

Hi
I have a certificate from GoDaddy and it contains:
1st) Device
2nd) Intermediate
3rd) Root
-----BEGIN CERTIFICATE-----
blaablaablaa
asdaas;dkjfa;sdkfj
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
asdfasdfasdfasdf
asdfasdfasdfd
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
asdflkas;dfkjas;df
asd;flkasj;dfsdf
-----END CERTIFICATE-----
Am I supposed to put all of these in one text file and import it in ISE (choose EAP: Use certificate for EAP protocols that use SSL/TLS tunneling) in ISE?
or do I just need to copy 1st Device cert and import it to ISE or maybe 1st+2nd ?
Thanks.

Seperate in 3, and install seperately
Sent from Cisco Technical Support Android App

.p12 Certificate import in weblogic server 10.3.6.0

Hi,
I am facing a issue regarding certificate import in weblogic server 10.3.6.0. In my project I built a java webservice where a https url is invoked with xml input(correct format).Https url is restricted. I can not open this url from my browser. I got '403 : Forbidden' error in browser as well as webservice log in server. I asked my client. They gave me one .jks and one .p12 certificated file and password. When I installed this .p12 (giving password) in my local windows computer, I am able to open that https in my browser.I have imported this .p12 certificate in 'cacerts' as well as 'DemoTrust.jks' in weblogic server and restarted the server. But i am getting the same error(403 : Forbidden) in weblogic server.
Where should I import this .p12 in weblogic server? I mean in which key store.
FYI,
This code is running fine in 10g production server.I haven't developed this code. I have migrated this code to 11.1.1.7.0.
I am using this .jks() in the java code.
        System.setProperty("javax.net.ssl.keyStore", keyStore.jks);
        System.setProperty("javax.net.ssl.keyStorePassword", "<password>");
Weblogic server is running in unix environment.
Read many posts... But did not any find right solution. Can anybody please help me solve this.

If i remember correctly, .p12 will have both the public and private key.
You need to convert it to a jks and configure the server to use this jks
Converting certificate formats | Middleware wonders!!
Weblogic SSL configuration
Thanks,
Faisal

Importing self-signed certificate

Hi there!
I have some problems in importing SSL certificates on my macbook.
There are 2 certificates that needs to be imported: the root CA certificate, which is self-signed naturally and private user certificate, which is signed by above-mentioned CA.
The first file in .crt format, which is consists of CA public key and sign. The second file in .p12 format, which is consists of encrypted public and private keys.
The problem is:
I can't import nor CA neither my personal certificate.
The CA cert should be imported at "CA" tab in keychain, but the import button ("+") is inaccesible here:
http://img.200133883.info/big//%D0%A1%D0%B2%D1%8F%D0%B7%D0%BA%D0%B0_%D0%BA%D0%BB %D1%8E%D1%87%D0%B5%D0%B9-20120313-143521.png
When I tried to double-click CA.crt I got the import error # -67762 which saying that attribute "key length" was invalid. The same thing with my personal certificate.
Could somebody explain me, how should I import those two SSL certificated?

I'm using self-signed certificate from SBS. Right now it's not the question, if something is misconfigured within my certificate (I'm aware of SBS certificate problems), the problem is that E90 WILL NOT recognize .cer or .der files as certificates.
There must be someone, who can answer this really simple question, which certificate formates are supported on E90.
You will find this type of question posted many times on different forums, with diiferent suggestion, but they simply don't work.
Again my error is "file format not supported"

How to install IPSec Client Certificate for Apple products (iPad,iPhoe and Mac)

We need Ipsec vpn client authentication with certificate (instead of pre-shared key). We tested the same with Windows client and its works fine. However when we used the same certificates with Apple products (iPad, iPhoe and Mac) it doesnt work.
We have two types of certificates installed on the client from the CA server.
One is the root certificate with the extenstion .cer
and the other one is client certificate with the extension of .pfx (personal informaiton exchange)
We can not find a proper document to install certificates and client configuration for iPad,iPhoe and Mac. We need to know what type of certificates needed, what are the certificate formats and how to install etc.
Appreciate if someone has implemented this and share any documents.
thanks

This will be helpful for you :-
http://images.apple.com/iphone/business/docs/iOS_Certificates_Mar12.pdf
Manish

Confused with certificate (cer/crt/der/p12/pem) and keypair generation

I've searched the Internet and still can find an example forgenerating keypair and saved in certificate format. Since the most example or the keytool can only generate one certificate, can someone help me on this?
Also, should the public key and private key generated be in either .cer, .crt, .der, .p12, .pem format?
Thanks in advance!

According to the CA's online document, our parties and I will receive disk(s) of certificate after registration. They have a service to create certificates for customer. So I "think" the .p12 or .cer file will be generated, sealed and mailed to us.
Then I can read the private key on it with some provider e.g. PKCS8EncodedKeySpec and KeyStore.getInstance("PKCS12", "BC"). Also using X509EncodedKeySpec and KeyFactory.getCertificate(alias), I can get the public key which could be sent to our parties.
Is it correct?
Actually I don't know who should generate the key files with X509 and PKCS12 standard !

SAP QM -CERTIFICATE

Dear all
I want to create a new format for an outgoing test certificate with MIC's,recorded results, batch no., company address etc and take a print out in SAP. Is it possible in SAP to design a own certificate format or shall I have to use standard certificate profiles only, which seems to be containing not enough details. Please guide me how to create a outgoing certificate and take a print out. Or can the recorded results be directly linked to the certificate profiles for a particular lot inspected.
I was told that incoming certificates can be accepted at the MIGO screen or in the UD screen. How to indicate that we have received an incoming certificate from a vendor for a raw material.Please tell me for both MIGO screen and in the UD screen also.
Selvakumar

Hi,
A certificate profile controls inspection lot selection, the sequence of characteristics, and the characteristic data.COA Profile contains the List of MICs in desired sequence in which the result for them is supposed to be printed in the COA.
Within the certificate profile, you determine the selection and sequence of the characteristics whose results are to be documented on the certificate. You can vary the origin and representation of the data for each characteristic. You can also withhold certain information from the certificate, if, for example, you do not want to reveal a certain measured value.
At the header level of the certificate profile, you can define restrictions for selecting inspection lots and partial lots. For example, you may want to specify that only lots with a quality score of at least 80 are considered. At certificate creation, the system selects all inspection lots and partial lots for the material (and batch, if necessary) that meet the selection criteria and have a usage decision. The characteristics are then retrieved from the most recent inspection lot or partial lot in this list. (The lot creation date is the determining factor.)
If further clarity required, pls go through link.
http://help.sap.com/erp2005_ehp_03/helpdata/EN/2d/35122b448c11d189420000e829fbbd/frameset.htm
Regards
Venkat.V

Salary Certificate

hi All,
I am Sorry to place my Requirement here,
i am in in Urget need of a Salary Certificate Format,
i Searched on Google but as our Google is Filtering at my Offc,opens after 5 pm
any body has Salary Certificate Format ,Couldu please get it for me from Google if there is no Filter
please paste the same here
I apology for this Requirement
many thanks

Not sure how this relates to the Oracle Database.
If you are asking for a certificate format that you could personally use to present to a bank, discuss this with your HR group.
If you are asking for an example layout to be created by your programs, realize that it is just a form letter with some blanks filled in. An example, modified from one at http://www.englishforums.com/English/HowWriteSalaryCertificate/gvlgc/post.htm (posted by 'Avangi') is
To whom it may concern,
(your name) is currently employed by (name of company) as a (name of your job) .
(your name) has been working with us since original hire date of (date you started).
The position is secure, and we look forward to continuing employment.
The employee's weekly/ monthly salary is __________________ . (If there are bonus arrangements, or any additional income from the company,
try to explain it and we can take a look. If you work on an hourly basis, try to explain the rate and the number of hours, and any overtime arrangements,
etc.)
(your boss' name and title)
(signature)
A much better idea would be to get a sample from your bank as it would incorporate your cultural differences.
Edited by: Hans Forbrich on Dec 20, 2009 8:04 PM

Making Certificate widget Captivate 7 work

It is probably a very simple question, but I am lost. How will I make Certificate widget work in Captivate 7 ?
I have inserted the widget into last screen of my file, after quiz and quiz results. How will I make it "pick up" quiz score and grade? Can I delete grade?
Thank you

HI,
The Certificate format is editable and so you can delete or add text in it. In the Widget Properties, double click on the Certificate and it becomes editable.
The score obtained in the Quiz is automatically picked up by the widget and gets populated in corresponding section of certificate. 'Score' in Edit Variables should be ON. (Refer screenshot below)
The username is taken from LMS. If you want to give your own username, a user-defined variable solves this problem.
Click on the Edit Variables in Widget Properties
Mark Name as OFF
Mark Other as ON and give any user-defined variable name
Create the user-defined variable with the same name in Captivate and give the name that should appear in certificate in Value field
Let me know if you find any other difficulty in using the widget.
Regards,
Salini

How to get the correct client certificate used in the two way ssl

how to export the certificate in browser to the correct client certificate format needed by the WLSSSLAdaptor?
I can export the certificate in browser to p12 or pfx format, but how to retrieve the private key from it and convert to PKCS#8?
anyone did this before?
Thanks

Hi,
Use the event after_user_command.When the user clicks any other buttons in the toolbar,this event will be triggered after the processing and you can handle the sub-total for % columns here.
Regards,
Archna Raja

RSASSA-PSS certificate signature algorithm support

Hi,
does anyone know if the certificate signature algorithm RSASSA-PSS is supported by Mac OS X?
Currently I have an issue with integrating Mac OS X in SCCM due to an certificate error - bad certificate format!
THanks!

Brian,
There is no correlation at all between the
AlternateSignatureAlgorithms=1 or 0 line and the use of SHA256. In my book, it is recommended when you get into the weirder combinations (Elliptical curve versions, etc.)
If you do as you plan (using AlternateSignatureAlgorithms=0),
then the CA certificates will show Sha256RSA as the signature algorithm, and be universally accepted.
As you stated...
1) Change the capolicy.inf on the root CA and renew the root CA certificate.
2) Change the CAPolicy.inf on the issuing CA and renew the issuing CA certificate
Now start issuing the KSP certificates, they will be usable on Firefox
Brian

Certificate upload problems in Visual Administrator (Elster)

Hello all,
to communicate with german tax authorities we have to upload a certificate to the Visual Administrator. The necessary steps are described in SAP Note 1279472 and 1275854.
When I upload the certificate the Visual Administrator asks for another certificate after I entered the correct password ("Load chain certificate #1 from"). And then I get the error messages
"Certificate: ID21143: Certificate format error: java.lang.ClassCastException" and
"Certificate: ID21112: Not a PKCS#8 formatted key. PublicKey algorithm not implemented: PKCS#7 data"
As I followed the notes step by step I have no idea why it doesn't work. What other reasons can there be?
Best regards,
David

Hi David,
can you please tell what type of certificate you are trying to upload? which format? That we way we can figure out the problem you are facing.
Try to include all the certificates botht the private key and the public key together in the PKCS12 format. If you have all certifcates try to use Open ssl tool to convert into pkcs12 format and then try to import into VA and i think this should work.
If you dont use the PKCS12 format then the VA will keep on asking for the certiifcates. This is what i had once and may be different in your case
Thanks,
Raj
Edited by: raj reddy on Jan 31, 2009 6:50 AM

Certificate Formatting

Similar Messages

Maybe you are looking for