How to fetch certificates issued in past

Hi,
I have a long list of templates issued in my Client's Issuing CA, some of them are not in use. If I try to export " Issued Certificates" list from CA, it hangs.
I want to know how many certificates and last certificate issed from a specific template for fine-tuning and seggregation purpose. Please let me know how we can check that status.
Thanks
Neha Garg

Hi Paul,
I am getting the output like this :
C:\Windows\system32>certutil -view -restrict "certificate template=<1.3.6.1.4.1.
311.21.8.10269956.2688026.1196953.3333800.9810006.227.1092942.575204>"
Schema:
Column Name                   Localized Name                Type    MaxLength
Request.RequestID             Request ID                    Long    4 -- Index
ed
Request.RawRequest            Binary Request                Binary 65536
Request.RawArchivedKey        Archived Key                  Binary 65536
Request.KeyRecoveryHashes     Key Recovery Agent Hashes     String 8192
Request.RawOldCertificate     Old Certificate               Binary 16384
Request.RequestAttributes     Request Attributes            String 32768
Request.RequestType           Request Type                  Long    4
Request.RequestFlags          Request Flags                 Long    4
Request.StatusCode            Request Status Code           Long    4
Request.Disposition           Request Disposition           Long    4 -- Index
ed
Request.DispositionMessage    Request Disposition Message   String 8192
Request.SubmittedWhen         Request Submission Date       Date    8 -- Index
ed
Request.ResolvedWhen          Request Resolution Date       Date    8 -- Index
ed
Request.RevokedWhen           Revocation Date               Date    8
Request.RevokedEffectiveWhen Effective Revocation Date     Date    8 -- Index
ed
Request.RevokedReason         Revocation Reason             Long    4
Request.RequesterName         Requester Name                String 2048 -- In
dexed
Request.CallerName            Caller Name                   String 2048 -- In
dexed
Request.SignerPolicies        Signer Policies               String 8192
Request.SignerApplicationPolicies Signer Application Policies   String 8192
Request.Officer               Officer                       Long
4
Request.DistinguishedName     Request Distinguished Name    String 8192
Request.RawName               Request Binary Name           Binary 4096
Request.Country               Request Country/Region        String 8192
Request.Organization          Request Organization          String 8192
Request.OrgUnit               Request Organization Unit     String 8192
Request.CommonName            Request Common Name           String 8192
Request.Locality              Request City                  String 8192
Request.State                 Request State                 String 8192
Request.Title                 Request Title                 String 8192
Request.GivenName             Request First Name            String 8192
Request.Initials              Request Initials              String 8192
Request.SurName               Request Last Name             String 8192
Request.DomainComponent       Request Domain Component      String 8192
Request.EMail                 Request Email Address         String 8192
Request.StreetAddress         Request Street Address        String 8192
Request.UnstructuredName      Request Unstructured Name     String 8192
Request.UnstructuredAddress   Request Unstructured Address String 8192
Request.DeviceSerialNumber    Request Device Serial Number String 8192
RequestID                     Issued Request ID             Long    4 -- Index
ed
RawCertificate                Binary Certificate            Binary 16384
CertificateHash               Certificate Hash              String 128 -- Ind
exed
CertificateTemplate           Certificate Template          String 254 -- Ind
exed
EnrollmentFlags               Template Enrollment Flags     Long    4
GeneralFlags                  Template General Flags        Long    4
PrivatekeyFlags               Template Private Key Flags    Long    4
SerialNumber                  Serial Number                 String 128 -- Ind
exed
IssuerNameID                  Issuer Name ID                Long    4
NotBefore                     Certificate Effective Date    Date    8
NotAfter                      Certificate Expiration Date   Date    8 -- Index
ed
SubjectKeyIdentifier          Issued Subject Key Identifier String 128 -- In
dexed
RawPublicKey                  Binary Public Key             Binary 4096
PublicKeyLength               Public Key Length             Long    4
PublicKeyAlgorithm            Public Key Algorithm          String 254
RawPublicKeyAlgorithmParameters Public Key Algorithm Parameters Binary 4096
PublishExpiredCertInCRL       Publish Expired Certificate in CRL Long    4
UPN                           User Principal Name           String
2048 -- In
dexed
DistinguishedName             Issued Distinguished Name     String 8192
RawName                       Issued Binary Name            Binary 4096
Country                       Issued Country/Region         String 8192
Organization                  Issued Organization           String 8192
OrgUnit                       Issued Organization Unit      String 8192
CommonName                    Issued Common Name            String 8192 -- In
dexed
Locality                      Issued City
String 8192
State                         Issued State
String 8192
Title                         Issued Title
String 8192
GivenName                     Issued First Name             String 8192
Initials                      Issued Initials               String 8192
SurName                       Issued Last Name              String 8192
DomainComponent               Issued Domain Component       String 8192
EMail                         Issued Email Address          String 8192
StreetAddress                 Issued Street Address         String 8192
UnstructuredName              Issued Unstructured Name      String 8192
UnstructuredAddress           Issued Unstructured Address   String 8192
DeviceSerialNumber            Issued Device Serial Number   String 8192
Maximum Row Index: 0
0 Rows
   0 Row Properties, Total Size = 0, Max Size = 0, Ave Size = 0
   0 Request Attributes, Total Size = 0, Max Size = 0, Ave Size = 0
   0 Certificate Extensions, Total Size = 0, Max Size = 0, Ave Size = 0
   0 Total Fields, Total Size = 0, Max Size = 0, Ave Size = 0
CertUtil: -view command completed successfully.
but it doesnt give me the output that I am looking for. I want to know details of last certificate issued by a given template and its validity status.
Please let me know if I need to make any changes in command.
Thanks
Neha Garg

Similar Messages

How to resolve certificate issues? - Nokia C3

my own problem is diffrent my own is saying update certificate and i keep updating still no improvement it does nt open i use c3
Moderator's note: The title was edited as the post was moved to the most appropriate board.

Hi petabah,
Welcome to the forum!
Do you get this error when trying to access or download a particular app? How are you updating this certificate? Are you downloading it using the mobile browser? When did your phone start showing this error message?
Although this is for a different error related to app certificates, try checking this link and see if the suggested fixes will help resolve the issue with your Nokia C3: Certificate not on phone or SIM - for S40 phones.
Let us know how it will go.

How do i deal with 'security certificate' issues on my iPad2? I'm unable to answer the security questions that pop up when Im trying to download an app because the pop up does not load properly...

Basically my Ipad2 stopped allowing me to go to sites such as Tumblr a little while ago. It wouldn't display the page properly because of 'security certificate' issues. This in itself would not have been such a problem, but when I went to the App store to try and download the Tumblr App, a pop up appeared asking me to answer some security questions before I could successfully install the App. However, the pop up would not display correctly because of 'security certificate' issues and as a result I can't download any apps from the App Store. Can anyone help with this??

Well, I maged to delete some stuff, download the update...
My Mac mail is still not ok. Still only displays today, yesterday and everything is the 16th of the month previous to this?
All a bit strange to say the least any suggestons on how to resolve this.
I now have a second issue in all my emails at the very top of each it describes in detail the full information of
          Delivered-To:
          Received:
          Received:
          Received:
          Received:
          X-Received:
          Return-Path:
          Received-Spf:
          Authentication-Results:
          Content-Type:
          Mime-Version:
          X-Mailer:
          X-Cloudmark-Analysis:
Surely this should not be displayed rather insecure I would think. Any suggestions on how to amend

How to fetch post goods issue date and sales order creation date

Hi All,
How to find out the difference between SD Sales Order Item Creation Date and final Post goods issue Date. I would like to know how to fetch those dates and what is the relationship between the tables from which i will get the dates.
Please let me know the solution .
Thanks in advance.

Hi,
Sales order creation date is when u raise a sales order in favor of the customer using VA01.......using ATP logic system purposes the material availability date....
after saving ur sales order...when u raise the Delivery using VL01n w.r.t to OR...than u have to perform picking ....In the picking Tab...specify the amount to be picked than press Post Good Issue....means the goods left the company premises ..
You can the fetch the values using tables- Use T code SE12 or SE16
Vbak-----order header
Vbap-----order item
Vbek-----order schedule line
Likp-----Delivery header
Lips----Delivery item

How to filter certificate templates in Certificate Authority snap-in with the correct values

How to filter certificate templates in Certificate Authority snap-in with the correct values
I have a 2012 R2 server running Microsoft Certificate Authority snap-in.
I want to do a filter on a specific Certificate Template which i know exists in the 'Issued Certificates' folder.
All the documentation i can find seems to suggest i copy the certificate name and use this in the View Filter.
1). I add the 'Certificate Template' option into the Field drop-down.
2). I leave the Operation as the '=' symbol
3). I paste in just the name of the template in question. for example: 'my computers'
The search results always come back blank 'There are no items to show in this view.' even when i know there are many instances of this template. I've tried on a win 2008 server and same issue.
Is there a correct value to enter for the Certificate Template name?
Can this be done easier using certutil commands?
When i run the certutil tool i can confirm i have several issued templates. Certutil -catemplates -v > c:\mytemplate_log.csv
Anybody know what i'm doing wrong?
I seem to be getting nowhere with this one.

> But its important you are using the template name, not the display name
this is incorrect. OIDs are mapped to *display name*, not common name (it is true for all templates except Machine template). That is, in order to translate template name to a corresponding OID, you need to use certificate template's display name. And, IIRC,
template name in the filter can be used only for V1 templates. For V2 and higher, OID must be used.
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new: SSL Certificate Verifier
Check out new:
PowerShell FCIV tool.

Certificates issued by communications server for client authentication

Hi,
we ran into problem with those certificates, that are being issued by the lync server itself. In our enteprise we have CX600 and CX3000 phones, and i know that certificate authentication is required for the phones to work (both for registrar and webservice).
However, now that users have lync installed, they have their communications server certificate assigned as well. The problem is when a user needs to sign a document with the certificate from our private CA, for most of the users, word or excel suggests to
use a certificate issued by communications server, not our ent CA. Maybe there is a way for LYNC to trust private enteprise CA and not give out its own certificates and STILL use certificate authentication?
Thanks!

Facing almost the same issue, Lync (server) issues ClientAuth certs from "Communication Server", (btw
is not trusted of course), and in turns forces users to make a selection of which VPN cert to use when dialing in, instead of only one ClientAuth cert installed, they now have 2 ClientAuth certs installed, which our internal CA's should care about and NOT
the Lync (server).
Don’t get how an MS product of this caliber can be built without proper PKI integration, how can it NOT utilize internally issued certs for client authentication???
Not the first though, SCCM and OSD is another example....
However, are you saying that Lync communication can’t be used without certificate authentication,
without the user being spammed with credential prompts?
Trying to get clarification on this…

How to import the Issues list from an Excel File in Project Server 2013

Hi,
I'm using Project Server 2013.
A Project Manager has been playing with the Issues List, deleting some fields, creating new columns and modifying some columns name. The result of this is that I'm getting this error everytime the task
Reporting (Project Sync) is executed:
General
Reporting Wss list sync failed:
ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='4feafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='5deafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='69eafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='75eafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='81eafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='8deafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
Reporting message processor failed:
ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='5beafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='67eafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='73eafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='7feafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='8beafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='97eafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
Queue:
GeneralQueueJobFailed (26000) - ReportingWSSSync.WSSSyncMessageEx. Details: id='26000' name='GeneralQueueJobFailed' uid='98eafda7-f147-e411-940d-005056957f05' JobUID='9e937da7-f147-e411-940e-005056957f0d' ComputerName='b579360a-53ab-4fe0-bf9b-c62f5e8d3529'
GroupType='ReportingWSSSync' MessageType='WSSSyncMessageEx' MessageId='1' Stage='' CorrelationUID='0945bd9c-0d6a-a0f1-47b0-68cdfcfbff9a'. For more details, check the ULS logs on machine
b579360a-53ab-4fe0-bf9b-c62f5e8d3529 for entries with JobUID
9e937da7-f147-e411-940e-005056957f0d
What I'm trying to do is to create a new Project from the scratch, update the Issues List, not deleting or modifying columns, just creating new columns in order to match the names he (the Project Manager) put in his Issues List, then Export the list to Excel,
and then create a datasheet view matching the Exported list, but here I don't know how to import the list (copy / paste or whatsoever it can be done...)
Do you know how to do it, or do you know another/any method to solve this problem?
Thank you in advance,
José Espases

Hi José,
2 considerations:
The first one is that (as you experienced) one should not delete or rename any of the predefined columns in the risk/issue list. What you did is the right way, meaning keeping the native column as is and creating new ones based on the business needs. Finally
you just need to create view with the appropriate fields.
Then for importing risks from an Excel list, I can't test it right now, but you should have a datagrid view (MS Access type) allowing you pasting data from Excel.
Hope this helps,
Guillaume Rouyre, MBA, MCP, MCTS |

When starting Windows 7 Sync Notifier reports "The procedure entry point sqlite3_wal_checkpoint could not be located in the dynamic link library SQLite3.dll." Any suggestions as to how to rectify this issue?

When starting Windows 7 Sync Notifier reports "The procedure entry point sqlite3_wal_checkpoint could not be located in the dynamic link library SQLite3.dll." Any suggestions as to how to rectify this issue?

With Windows Explorer, navigate to your C:\Program Files\Common Files\Apple\Apple Application Support folder.
Copy the SQLite3.dll that you should find there, navigate to the nearby Mobile Device Support folder, and Paste it in there also.
Restart the programme all should be well
In case that your OS is (64 bit)
1. Open windows explorer, go to location C:\Program Files (x86)\Common Files\Apple\Apple Application Support
2. Copy file "SQLite3.dll"
3. Now paste it in the folder C:\Program Files (x86)\Common Files\Apple\Mobile Device Support
4. Restart the programme, it should not display that message, it should be clear.
Good Luck

How to fetch data from Mysql with SSL.

I am using jdk1.5 and mysql 5.0.
How to fetch data from Mysql with SSL
I am using url = jdbc:mysql://localhost/database?useSSL=true&requireSSL=true.
It shows error. how to fetch

I have created certificate in mysql and checked in mysql.
mysql>\s
SSL: Cipher in use is DHE-RSA-AES256-SHA
but through ssl how to fetch data in java.

Checklist for Exchange Certificate issues

Checklist for Exchange Certificate issues
1.
Why certificate is important for Exchange and What are Certificates used for
Exchange is now using certificates for more than just web, POP3, or IMAP. In addition to
securing web services, it has also incorporated Transport Layer Security (TLS) for session based authentication and encryption.
Certificates are used for several things on Exchange Server. Most customers also use certificates
on more than one Exchange server. In general, the fewer certificates you have, the easier certificate management becomes.
IIS (OWA, ECP, EWS, EAS, OA, Autodiscover, OAB, UM)
POP/IMAP
SMTP
2.
Common symptoms for
certificate issue
Here we can see three different types of the certificate warning, mainly from the Outlook
side.
a.
Certificate mismatch issue
b.
Certificate trust issue
c.
Certificate expiration issue
3.
Checklists
In this section, checklists will be provided according to the three different scenarios:
Certificate Mismatch Issue
[Analysis]:
This issue mainly occurs because the URL of the web services Outlook tries
to connect does not match the host name in the certificate.
[Checklist]:
Firstly make sure how many host name in your certificate the certificate. Run “Get-ExchangeCertificate | select certificatedomain”.
Secondly, check the web services URLs which Outlook are trying to connect to. Run “Test Email AutoConfiguration”
In this scenario, you need to check the host name for the following services:
Autodiscover
EWS
OAB
ECP
UM
If any of the urls above does not match the one in the certificate, refer to the following article to change
it via EMS:
http://support.microsoft.com/kb/940726
1.
Do not forget to restart the IIS service after applying the changes above.
2. Make sure a valid certificate is enabled on the IIS service.
Certificate Trust Issue
[Analysis]:
For the self-signed and PKI-based (Enterprise)
certificates, they are not automatically trusted by the client computer or mobile device, you must make sure that you import the certificate into the trusted root certificate store on client computers and devices. On the other hand, Third-party or commercial
certificates do not have this problem. Most commercial CA certificates are already trusted because the certificate already resides in the trusted root certificate store. Because the issuer is trusted, the certificate is also trusted. Using third-party certificates
greatly simplifies deployment.
[Checklist]:
If it’s an Enterprise CA certificate, manually install the root certificate to the “Trusted Root Certification Authorities” folder:
If it is a 3<sup>rd</sup>-party certificate, first remove and reinstall the certificate. Check whether the Windows Certificate Store on the local
client is corrupted. If it still does not work, please contact the third-party CA support to verify the certificate.
Certificate Expiration Issue
[Checklist]:
When a certificate is about to expired, we just need to renew it by referring the following article:
Renew an Exchange Certificate
http://technet.microsoft.com/en-us/library/ee332322(v=exchg.141).aspx
To avoid any conflictions, it’s recommended to remove the expired certificate from the certificate store.
[How to set a reminder to alert the administrator when a certificate is about to expired]:
It’s easy to fix the certificate expire issue. But it should be more important to set a reminder before the
certificate expiration. Or there can be a large user impacts.
Generally, the Event ID “^(24|25)$” will appear in Application log when a certificate is about to expire.
If it’s not quite visible, we can refer to the following solution:
http://blogs.technet.com/b/nexthop/archive/2011/11/18/certificate-expiration-alerting.aspx
OWA certificate revoked issue
[Analysis]:
IE
includes support for server certificate revocation which verifies that an issuing
CA has not revoked a server certificate. This feature checks for CryptoAPI revocation when certificate extensions
are present. If the URL for the revocation information is unresponsive, IE cancels the connection.
[Solution or workaround]:
1. Contact CA provider and check whether the questioned certificate is in the Revoked List.
2. If not, check whether the certificate has a private key.
3. Remove the old certificate and import the new one.
Workaround:
IE Internet Options -> Advanced tab -> Clear the "Check for server certificate revocation"
checkbox.
4.
More References
Digital Certificates and SSL
http://technet.microsoft.com/en-us/library/dd351044(v=exchg.150).aspx
More on Exchange 2007 and certificates - with real world scenario
http://blogs.technet.com/b/exchange/archive/2007/07/02/3403301.aspx

(Reported previous post with link to SIS package to moderator)
This is not the correct SIS package for the N73. The package shown is for S60 3.2 devices, but the N73 is not S60 3.2, I believe it is S60 3.0.
Most features may work with this SIS, but if you experience strange problems, try using the S60 3.0 version.
But there are no significant difference between 2.5.3 and 2.5.5 with regard to attachments. The only changes were with localization (languages).
At this point, try 2.7.0 which is out now:
http://businesssoftware.nokia.com/mail_for_exchange_downloads.php
Make sure to pick the right phone on the drop down list. It does matter! There are 4 different packages. This list makes sure you get the right one.
I have seen some issues with attachments not completing that seem to be carrier dependent. You can test this my using Wifi (if possible).
Message Edited by m4e_team_k on 28-Sep-2008 12:25 AM

Youtube (https)security certificate issue

Hi
I'm using latest firefox version with and recently I'm facing this strange issue ... everytime I try to visit youtube, to be specific, when not logged in on any google accounts .. I can visit http://www.youtube.com but when I try to login, in which case it redirects to https:// and It shows the following error(check image url):
https://imageshack.com/i/ezbe0c53j
And if I try to add exception, it shows this screen(check image url):
https://imageshack.com/i/hj41802cj
(PS: Couldn't find upload option here so I had to use otherimage hosts)
Also I tried changing windows time, adding auto time sync from windows site and also tried changing profile, disabling add on and testing and also tried removing cache/cookies from both google.com and youtube.com and so far nothing worked ... I can't seem to access youtube while logged in (https)
Also its only youtube, no other website shows this security certificate error!
please provide a solution to this asap, thanks!

When you click Add Exception, you get a Google error page instead of a pop-up dialog? Or are you saying that after you added the exception, YouTube's home page won't load. That's mildly suspicious...
If you return to the Add Exception dialog and use the View button, how does the certificate compare with the attached screen shot?

How to migrate certificate for a native installer

Hello,
We have a native AIR app that uses some native files, so it needs to be packaged using "adt -package -target native [files...]" command and cannot be created as an AIRI file.
We include the SWF file, the app description XML and the required native files into the installer, and we also include our code signing certificate into this command line, and everything worked great.
Recently our code signing certificate expired, and we released an update with a new certificate.
However on the machines where our application had been installed previously, installation fails with the following error.
The certificate of the installed app fails to match either the signature or migration signature of the AIR file
It turns out that AIR framework expects a migration signature for applications that had been installed before and changed certificate.
The problem is that "adt -migrate" command expects an .AIR file, and fails to migrate a native installer (such as .EXE or .APP).
How should we migrate a native installer? is there any option in adt to do this?
Thank you in advance,
Anatoly

I know this is an older post, but it helped me find out how to make the migration procedure for native installer. I tried it with self signed certificate created by ADT tool and everything went fine.
But now, we obtained a commercial AIR signing certificate from Thawte and the process failes in step 3) ADT saying
'Certificate in PATH_TO_P12 could not be used to sign setup.msi' on Windows.
On mac, it says that signing native installer on OSX is not supported, so I skipped the signing option in step 3) and it worked fine.
I can skip the signing option on Windows as well and the process succeeds, but running the installer on machines with previous versions of application results in "Installer mis-configured' error message - the same error as if the migration process was not applied.
I already contacted Thawte if it is a certificate issue, reply from them was 'AIR certificate can only sign .air applications'. But when I build a native application directly from FlashBuilder and sign it with the Thawte certificate the whole process seem to succeed. The application can be installed on machines without previous version of the application. Those who already have the older version get the 'Installer mis-configured' error message.
I want to mark out again, that the same process but with a self signed certificate created with ADT, is successfull and the application can be installer as an update on machines with older version of the app. So I assume the workflow is correct.
Any ideas? Or somebody having the same issue?
Thanks

I purchased an album on iTunes - Magna Carta - On July 9th. The album is all grey in My Music and I cannot play anything. I have the reciept however I don't know how to address the issue.... I have since bought music and it downloaded fine.

I purchased an album on iTunes - Magna Carta - On July 9th. The album is all grey in My Music and I cannot play anything. I have the reciept however I don't know how to address the issue.... I have since bought music and it downloaded fine.

Hey kaliapple,
Thanks for the question. First, you can try deleting and redownloading the purchase by following along with this:
Downloading past purchases from the App Store, iBookstore, and iTunes Store
http://support.apple.com/kb/ht2519
If that doesn't resolve the issue, then you can read how to report an issue with your purchase here:
How to report an issue with your iTunes Store, App Store, Mac App Store, or iBookstore purchase
http://support.apple.com/kb/HT1933
Regards,
David

How to fetch the description of a field

Hi All,
Could anybody please tell me , how to fetch the field description for a given field name .Any function module for it or how to fetch it ??
Thanks in Advance.
Regards,
Rakesh.

Hi,
Copy paste this code and at the end of the code check the table len_table
data: len_table type standard table of DFIES .
   CALL FUNCTION 'DDIF_FIELDINFO_GET'
    EXPORTING
    tabname              = 'JKAP'                   {color:red}" change as per your requirement{color}
   FIELDNAME            = 'VBELN'              {color:red}" change as per your requirement{color}
*   LANGU                = SY-LANGU
*   LFIELDNAME           = ' '
*   ALL_TYPES            = ' '
*   GROUP_NAMES          = ' '
*   UCLEN                =
* IMPORTING
*   X030L_WA             =
*   DDOBJTYPE            =
*   DFIES_WA             =
*   LINES_DESCR          =
TABLES
   DFIES_TAB            = len_table
*   FIXED_VALUES         =
* EXCEPTIONS
*   NOT_FOUND            = 1
*   INTERNAL_ERROR       = 2
*   OTHERS               = 3
IF sy-subrc <> 0.
* MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
*         WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
Check out the internal Table len_table.
Hope it helps you,
Regards,
Abhijit G. Borkar

Certificate Issuer

Hello everyone,
I am attempting to setup an enterprise network with a HTTPS Inspection proxy. I have installed the certificate (that the proxy is using to issue other certificates) onto the Macs that are in the network (using keychain) and set the permisions to "always trust". From what I have been reading this is all that I would need to do (http://www.techrepublic.com/blog/mac/managing-ssl-certificate-authorities-on-os- x/314).
However when I enable the policy on the proxy server to intercept the SSL connections I get the following issue in Safari: "This certificate has an invalid issuer" (see attachment).
Does anyone have any ideas on how to fix this? or what I may have done wrong?
Ashley

I did two URL mappings similar as below.
Regular Mapping
==============
http://proxy.buyer.com
https://origin.buyer.com (example)
Reverse Mapping
==============
https://origin.buyer.com
http://proxy.buyer.com
I have downloaded the CA root certificate from https://origin.buyer.com and installed it to Netscape under the alias name "proxy".
However when I typed the URL http://proxy.buyer.com on my browser, it returned an error page to me and on the iPlanet error log, it said "The certificate issuer for this server is not recongnized by Netscape.......Netscape is refused to connect to this server".

How to fetch certificates issued in past

Similar Messages

Maybe you are looking for