Need help in certificate type!

hi ppl! currently i am working on SSLV3 using tomcat n iaik_jce to create the certificate.I created the CA Cert and the Intermediate Cert and they were place into the correct place in IE when i import it. But when i try to import the client which is sign by the CA, it went into the intermediate Authority section inside IE when i import it....i found out that i had made a mistake by putting BasicConstraints to True, but now it has been change to false, it becomes a cert in the "other people" catagory in IE!!!!! i really hope someone can tell me how to differenite between a user cert and other cert...pls help!! thanks!

i really need to know how do you define a certificate as a user cert besides the basic contraints..pls help...

Similar Messages

  • Windows Server 2008 R2 with multiple Roles OS Rebuild, Need help with Certificates.

    Hi,
    I have rebuilt a Server for my client and I require help with certificates..
    I am unsure exactly what to do to get this server working as it was.
    Example, The Windows Server 2008 R2 has Microsoft Exchange, DNS, DHCP, ADDS, FileServices,Network Policy and access Services and Webservices roles installed on a single box.
    Since the Server OS Rebuild I am getting 2 issues that pop up usually when Outlook in opened on a client Workstation,
    I have not dont anything certificate wise to the server since OS Install, and the messages I get and best described here
    I seen on a backdrive, a few certificate files I dont know if we can use these files for anything but we have the following files of drive E (Backup)
    e:\server.xxxx.com.au\gd_iis_intermediates.p7b
    e:\server.xxxx.com.au\server.xxxx.com.au.crt
    e:\ssl\2013-2018.cer
    1st Message is about a Proxy certificate I dont get this often but saw it today and my client clicked ok too quickly.
    I have seen it and didnt see it again after trying to close outlook and reopen
    I looked up google images and tried to find it...
    It's like this, (There is a problem with the proxy server's security certificate.
    The security certificate is not from a trusted certifying authority.)
    2nd Message is about Security Alert, Autodiscover.xxxx.com.au Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites security certificate.
    -X- The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certificating authority
    -TICK- The security certificate date is valid
    -X- The name on the security certificate is invalid or does not match the name of the site
    Do you want to preceed
    [Yes][No][View Certificate ...]
    3rd Message is very Close to the 2nd Message, is about Security Alert, xxxx-server.xxxx.local, Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites security certificate.
    -X- The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certificating authority
    -TICK- The security certificate date is valid
    -TICK- The name on the security certificate is invalid or does not match the name of the site
    Do you want to preceded
    [Yes][No][View Certificate ...]
    If you can help guide me thou this as I'm very new to setting up certificates. I had a friend tell me about something in DNS.. but he has been super busy and I want to learn what to do.
    Thank-You.

    Hiya,
    quite a lot has the same confusions as you do, so I've written a simple explanation on the subjet of certificates
    http://jesperarnecke.wordpress.com/2014/03/22/certificates-simple-explanation/
    Let me know if that helps you and if you need further assistance.

  • Need Help with data type conversion

    Hello People,
    I am new to java, i need some help with data type conversion:
    I have variable(string) storing IP Address
    IPAddr="10.10.103.10"
    I have to call a library function which passes IP Address and does something and returns me a value.
    The problem I have is that external function call in this library excepts IP Address in form of a byte array.
    Here is the syntax for the function I am calling through my program
    int createDevice (byte[] ipAddress).
    now my problem is I don't know how to convert the string  IPAddr variable into a byte[] ipAddress to pass it through method.

    Class InetAddress has a method
    byte[]      getAddress() You can create an instance using the static method getByName() providing the IP address string as argument.

  • Need help finding Driver type in the registry

    Hi,
    given a DSN(Data Source Name), I need to find the type of Driver it was assigned to in the Registry. pls help me to do this in java.
    Thanks in advance,
    Rao

    Hi jschell,
    Thanks for your response.
    I would like to explain my actual problem clearly now.
    I am working on an enterprise product where it has a setup screen in which it has a form with DSN and Database Type as the input fields. The database type could be either Oracle or MS SQLServer or MS Access.
    so, instead of entering both (DSN and Database Type) into the form, I would like to enter only DSN in the form, and based on this DSN, I should know what is the corresponding Database Type.
    Pls let me know how to do this without manually referring in the system.
    thanks for ur help and time.
    Rao

  • Need help regarding currency types

    Hi All,
      I need help in understanding the currency types.
    Presently in my system previous guys have designed the currency type = 10, so all the present data is in currency type=10 only,
    Now I need the data for currency type = 30, how can i make this.
    Please give me what are the different ways of achieving this.
    Thanks,
    vinay.

    Hi,
    If you are loading data for currency types then you can use it in Reorts for restrictions, if you are giving any selection in InfPackage then you need to change it for your requirement, else you need to reload the compeletly load the data from ECC.
    Thanks
    Reddy

  • Need help opening NAT type to OPEN on a model WRT54GS router for xbox 360

    I have tried from other people's advice and when i test Xbox Live i always get a Moderate NAT type. I am becoming frustrated with how it is not working and I am hoping someone can help me. Please leave advice/suggestions and thank you for your time.

    Open the setup page of the router using 192.168.1.1 by putting the password as admin with username as blank & click the Administration tab & on the same page you will see UPNP.You need to select it as disable in order to help opening NAT type to OPEN.

  • Need Help about Certificate based Authentication

    Hi friends..
    Currently, i'm trying to develop an applet that using Certificate Based Authentication..
    i have looked at this thread : http://forums.sun.com/thread.jspa?threadID=5433603
    these is what Safarmer says about steps to generate CSR :
    0. Generate key pair on the card.
    1. Get public key from card
    2. Build CSR off card from the details you have, the CSR will not have a signature
    3. Decide on the signature you want to use (the rest assumes SHA1 with RSA Encryption)
    4. Generate a SHA1 hash of the CSR (without the signature section)
    5. Build a DigestInfo structure (BER encoded TLV that you can get from the PKCS#1 standard) that contains the message digest generated in the previous step
    6. Send DigestInfo to the card
    7. On the card, the matching private key to encrypt the DigestInfo
    8. Return the encrypted digest info to the host
    9. Insert the response into the CSR as the signature
    Sorry, i'm a little bit confused about those steps.. (Sorry i'm pretty new in X509Certificate)..
    on step 4,
    Generate a SHA1 hash of the CSR (without the signature section)
    Does it mean we have to "build" CSR looks like :
    Data:
    Version: 0 (0x0)
    Subject: C=US, ST=California, L=West Hollywood, O=ITDivision, OU=Mysys, CN=leonardo.office/[email protected]
    Subject Public Key Info:
    Public Key Algorithm: rsaEncryption
    RSA Public Key: (1024 bit)
    Modulus (1024 bit):
    00:be:a0:5e:35:99:1c:d3:49:ba:fb:2f:87:6f:d8:
    ed:e4:61:f2:ae:6e:87:d0:e2:c0:fd:c1:0f:ed:d7:
    84:04:b5:c5:66:cd:6b:f0:27:a2:cb:aa:3b:d7:ad:
    fa:f4:72:10:08:84:88:19:24:d0:b0:0b:a0:71:6d:
    23:5e:53:4f:1b:43:07:98:4d:d1:ea:00:d1:e2:29:
    ea:be:a9:c5:3e:78:f3:5e:30:1b:6c:98:16:60:ba:
    61:57:63:5e:6a:b5:99:17:1c:ae:a2:86:fb:5b:8b:
    24:46:59:3f:e9:84:06:e2:91:b9:2f:9f:98:04:01:
    db:38:2f:5b:1f:85:c1:20:eb
    Exponent: 65537 (0x10001)
    Attributes:
    a0:00
    on step 5, Build a DigestInfo structure (BER encoded TLV that you can get from the PKCS#1 standard) that contains the message digest generated in the previous step
    How DigestInfo structure (BER encoded TLV that you can get from the PKCS#1 standard) looks like?
    And what is the DigestInfo Contains, and what is TAG for DigestInfo?..
    Please help me regarding this..
    Thanks in advance..
    Leonardo Carreira

    Hi,
    Leonardo Carreira wrote:
    Sorry, Encode the Public Key is handled by On Card Application or Off Card Application?..
    I think its' easier to encode the public key by Off Card app..
    Could you guide me how to achieve this?, i think Bouncy Castle can do this, but sorry, i don't know how to write code for it.. :( All you need to do is extract the modulus and exponent of the public key. These will be in a byte array (response from your card) that you can use to create a public key object in your host application. You can then use this key to create a CSR with bouncycastle.
    I have several some questions :
    1. Does Javacard provide API to deal with DER data format?JC 2.2.1 does not buy JC 2.2.2 does, however I believe this is an optional package though. You can implement this in your applet though.
    2. Regarding the Certificate Based Authentication, what stuff that need to be stored in the Applet?..
    - I think Applet must holds :
    - its Private Key,
    - its Public Key Modulus and its Public Key Exponent,
    - its Certificate,
    - Host Certificate
    i think this requires too much EEPROM to store only the key..This depends on what you mean by Certificate Based Authentication. If you want your applet to validate certificates it is sent against a certificate authority (CA) then you need the public keys for each trust point to the root CA. To use the certificate for the card, you need the certificate and corresponding private key. You would not need to use the public key on the card so this is not needed. You definitely need the private key.
    Here is a rough estimate of data storage requirements for a 2048 bit key (this is done off the top of my head so is very rough):
    ~800 bytes for your private key
    ~260 bytes per public key for PKI hierarchy (CA trust points)
    ~1 - 4KB for the certificate. This depends on the amount of data you put in your cert
    3. What is the appropriate RSA key length that appropriate, because we have to take into account that the buffer, is only 255 bytes (assume i don't use Extended Length)..You should not base your key size on your card capabilities. You can always use APDU chaining to get more data onto the card. Your certificate is guaranteed to be larger than 256 bytes anyway. You should look at the NIST recommendations for key strengths. These are documented in NIST SP 800-57 [http://csrc.nist.gov/publications/PubsSPs.html]. You need to ensure that the key is strong enough to protect the data for a long enough period. If the key is a transport key, it needs to be stronger than the key you are transporting. As you can see there are a lot of factors to consider when deciding on key size. I would suggest you use the strongest key your card supports unless performance is not acceptable. Then you would need to analyse your key requirements to ensure your key is strong enough.
    Cheers,
    Shane

  • Need help with output type EDI for ERS

    All,
    I want to be able to run and ERS settlement and have the invoices created sent via EDI/XML to the supplier.   I have several questions on the set up.
    1)  I have output type ERS6 which is defined as ERS EDI.  I assume because it does not start with Z* this is SAP standard, so I shouldn't have to modify any of this.
    2)  I've added my supplier to this output type. 
    3)  I assume I need to create a partner profile for this supplier?  If so can someone tell me the message type to use?
    Is there any set up I'm missing in this process?   I've executed ERS but do not get an idoc and I'm fairly certain it's because I haven't done the partner profile set-up.
    Thanks for your help.
    Sandra

    Hi,
    You don't have to modify thise setup unless you have any customized requirement.
    You are missing partner profile setup.Carry out the setup and run MRRL tcode to create the idocs
    Enter the following values using tcode WE20.
    Field                                       Value
    Message type                         GSVERF
    Partner type                             LI (vendor)
    Partner function                        LF (vendor)
    Port                                         SUBSYSTEM ( Port to your middleware)
    Output mode                            such as Collect IDocs
    Basic type                                GSVERF01
    Application                                 MR
    Output type                                ERS6 or the type you have defined
    Regards,
    Karuna

  • Need help with DOC type web service

    hi,
    I am trying to write a simple message style ( doc type ) web service but no success so far. I have tried to search for examples but no use. I already implemented some simple RPC style web services like calculator etc and able to use them. I am more interested in the DOC type ( which sends SOAP message and receives SOAP message back). Can Anybody give me an example for implementing this type of service ( very-simple say HellowWorld ) or point me to some website . I am not able to generate the response envelope. I can write the client program which will send a SOAP Envelope to this services with one parameter NAME and the services should return Hello Name but in a SOAP envelope form. I can create a SOAP message in this Client using SOAPConnection and MessageFactory etc. Your help will be really appreciated. There is very little stuff about webservices on the internet as well on this forum.
    Thanks
    Vinod

    Hello kwilding2,
    Thanks for the quick response and pointing to some useful websites. I downloaded the code from web service essentials BUT all the examples are using SOAP RPC calls. They create a call object and call one of the service methods and a response is returned. I am little confused about this stuff. I am looking for something which returns the response in a SOAP envelope for which i think i need to use JAXM API which I already have downloaded. I have created a client which composes a SOAP envelope using SOAPConnection and other MessageFactory classes etc and can send this SOAP envelope to a web service. In return I want the web service to give the SOAP envelope.
    I have gone thru xmethods.net and picked the following stock quote request and response:
    Sample Request envelope:
    <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/1999/XMLSchema-instance" xmlns:xsd="http://www.w3.org/1999/XMLSchema">
    <SOAP-ENV:Body>
    <ns1:getQuote xmlns:ns1="urn:xmethods-delayed-quotes" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
    <symbol xsi:type="xsd:string">IBM</symbol>
    </ns1:getQuote>
    </SOAP-ENV:Body>
    </SOAP-ENV:Envelope>
    Sample Response Envelope:
    <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/1999/XMLSchema-instance" xmlns:xsd="http://www.w3.org/1999/XMLSchema">
    <SOAP-ENV:Body>
    <ns1:getQuoteResponse xmlns:ns1="urn:xmethods-delayed-quotes" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
    <return xsi:type="xsd:float">133.625</return>
    </ns1:getQuoteResponse>
    </SOAP-ENV:Body>
    </SOAP-ENV:Envelope>
    I also want the things in this order. This webservice at xmethods just returns the price for a stock, so how they say it returns this Response Envelope. Is this Envelope something implied. I am getting more confused.
    any help will be appreciated.
    Thanks
    Vinod

  • Need help adding certificate to WAP321

    Good evening,
    I recently bought the WAP321 access point. I've got it all set up for wireless, but am trying to import a certificate for the HTTPS interface. So far, I've tried the following:
    1. I created a new certificate template on my Windows Server 2008 R2 root CA
    2. I've created a request on the CA to create the certificate, and downloaded it in .cer format
    3. I've used openssl to convert the certficate to .pem format, as the device manual specified that it needed to be in .pem format
    4. I've attempted to upload this certificate in the HTTP/HTTPS Settings for the device
    Upload fails each time. I've tried with 512, 1024, and 2048 bit certificates, but still have the same problem each time. I've looked around, but can't find documentation for anything more that the basic user guide.
    Has anyone successfully added a certificate to their WAP321? Or does anyone have any ideas on what I'm missing?
    Thank you in advance!

    Hello
    same here - how can we apply 3-party signed (we usually use wildcard certifictes from verysign like *.example.org) SSL certificates to our WAP321?
    There is no  option to upload PKCS#12 private/public key/cert containers. There is  also no option to generate SSL certificate requests on the device  itself. Can somebody advice us, how to apply 3-party signed certificates to  the APs? Especially when the Capitive Portal (Guest Access for our  Clients) is used, providing trusted SSL cert is essential. And no, we do not use IPs but DNS names.
    -Raphael
    PS: by the way - in the new firmware (1.0.1.10) access via SSH seems to be gone? why is this the case?!?

  • Need help in deciding type of partition for tables

    Hi,
    I have few tables which have millions of record. In some of the tables, we have data of previous years, which we dont use now. Can we create a partition table for such type of tables.
    On other tables, How to decide if we have to use range/list/hash partitioning on our tables.
    Do i need to recreate indexes for this tables after creating partition tables.
    Please guide me.
    Best Regards,

    Partitioning decisions are based upon how you will access the data.
    If you access by date then partition by date.
    If you access by means of a list of values then use list.
    If you there is no pattern and you just need to break the data up into smaller buckets use hash.
    I see no reason why, based on what you have written, range partitioning by date would not be worthy of consideration.

  • Need Help in Data Type

    Hi :
    I am developing a applicaition in apex i have a reqirement like this i have created a check box, Check box will normally have check and uncheck values which is like 0 and 1
    now i need to create a table to hold these values if i check it must hold 1 if i uncheck it must hold 0 to the data base
    how to design a table with suitable data type to this please suggest
    Please give me both create table and how to insert into table also
    :p16_check is the check box item
    I tryed like this but this didnt work to me
    Create table Check // Createa table syntax
    Board Number(2)
    Insert into Check (Board) values (:p16_check) // Insert table Syntax
    Thanks
    Sudhir

    This is really an Apex question for the Oracle Application Express (APEX).
    There's nothing wrong with storing 0, 1 in your NUMBER(2) column (a NUMBER(1) would do). In the Apex form you need to define the properties of the checkbox to say what values represent checked and not checked (by default I think it is Y and N, which won't work with your number).
    Regards Nigel

  • Wireless connections need help on what type to get.....

    I have an iMac G5 and need to make it wireless. Due to construction. I believe its a 17 inch 1.8gh( I think). What would I need to make it wireless? Also my iMac is going to be a good 100-150 feet away and up a story from the dsl box. Plus the Floor itself is about 6 inches thick or more in spots. I don't think the airporter express will cover this range. And no there is no way of moving the box closer and I don't want a bunch of wires running all over the 2 story house. Any ideas of what product would be helpful in this case?
    Thanks!
    i Mac G5    

    "I don't think the airporter express will cover this range."
    Have you tried it?
    You will probably get more wireless info from the knowledgeable users in one of the AirPort Forums where the wireless users hang out.
    To find out which model computer you have:
    Need this info so that the knowledgeable users can provide you with the proper troubleshooting solution(s).
    http://docs.info.apple.com/article.html?artnum=301724-en How to identify your iMac
    http://docs.info.apple.com/article.html?path=Mac/10.4/en/mh355.html Getting information about your computer
    Also, you will probably need to advise which OS you are using.

  • Need help on movemnt type 712 doc

    Hi,
    i did a  mistake to scan the bin number instead of the amount. so now ia m trying to cancel but cancel this material doc with migo, because movement type 712 (see screen) is not available in the list.
    also i tried to canel this with mb11 but faicng authorization issue.
    can you provide ant alternative way to correct the things.
    thanks
    manoj

    Hi,
    Physical inventory differences cannot be reverse by MIGO or cancellation of material doc transaction. You have to do another Physical inventory differences that adjust back to the original qty, that means mistake in 712 need to be reverse back with another Post differences 711.
    Best Regards,
    Eric Ho

  • Need help on object type(complex)

    Hi All,
    i have an object type account_t as
    create type account_t as object (accountnumber number(30),
    holdername varchar2(20),
    currentamount number(20),
    minimalamount number(20),
    status varchar2(10),
    member procedure setcurrentamount(v_amount number),
    member function getcurrentamount return number,
    member procedure setstatus(v_status boolean),
    member function getstatus return varchar2,
    member procedure setholdername(v_holdername varchar2),
    member function getholdername return varchar2);
    i create another type accountmanager_t as
    create type accountmanager_t as object (
    depositamount number(30),
    withdrawalamount number(30),
    v_accountt account_t,
    member function deposit(d_accountt account_t,d_transno number default 1) return account_t,
    member function withdraw(w_accountt account_t,w_transno number default 2) return account_t);
    Accountmanager_t body as :
    create or replace type body accountmanager_t as
    member function deposit(d_accountt account_t,d_transno number default 1) return account_t as
    begin
    return self.amount+self.depositamount;
    end deposit;
    member function withdraw(w_accountt account_t,w_transno number default 2) return account_t as
    begin
    if self.status='OPEN' then
    if (currentamount-self.withdrawalamount) < minimalamount then
    if (currentamount-self.withdrawalamount) <> 0 then
    status:='CLOSED';
    return self.currentamount-self.withdrawalamount;
    end if;
    end if;
    myprint('No Sufficient funds for Withdrawal');
    return self.currentamount;
    end if;
    myprint('No withdrawal for closed account');
    return self.currentamount;
    end withdraw;
    end;
    i get the errors as :
    4/3 PL/SQL: Statement ignored
    4/15 PLS-00302: component 'AMOUNT' must be declared
    8/3 PL/SQL: Statement ignored
    8/11 PLS-00302: component 'STATUS' must be declared
    19/3 PL/SQL: Statement ignored
    19/15 PLS-00302: component 'CURRENTAMOUNT' must be declared
    SQL>
    How to pass the values of these variables from account_t type to accountmanager_t type?
    Any help??
    Regards,
    s.

    return self.amount+self.depositamount;I counld not find any amount field in your type definitions
    if self.status='OPEN' thenIs it w_accountt.status ?? since there is no status field in accountmanager_t type
    return self.currentamount-self.withdrawalamount;same comments for currentamount
    member function deposit(d_accountt account_t,d_transno number default 1) return account_t asWhere as your return expression is a number??

Maybe you are looking for

  • Deferred tax: Post invoice and payment separately $1" Message no. DEFTAX020

    while reversing a document thru FB08, it is giving the error message, " Deferred tax: Post invoice and payment separately $1" Message no. DEFTAX020. This is a stand alone invoice document , without any clearing document.  What is to be done ? Below i

  • Positioning a swf inside a DIV

    Hi everybody, I am redoing a site for a friend, which was originally done using frames in GoLive. The site is very siimple but I can't figure out how to positoin the menu that I've placed inside the navbar DIV along the left side. I want it to stay p

  • Comportement de serveur non affiché dans le panneau des comportements de serveurs

    Bonsoir, Je dispose d'une page développée en PHP - MySql qui contient un formulaire d'ajout de données en base. Lors de la création de la page, le comportement de serveur d'insertion de données était bien affiché dans le panneau des comportements mai

  • Calling external web service from XI 3.0

    Does anyone know how I can call an external web service from xi to post a message? I have a WSDL for the web service.

  • If records 999 then error

    hi friends, my task was one file to  one idoc the file has large no of records Condition is that if the number of items in the idoc after conversion crosses 999  it should report as error. i did some work for usual file to idoc procdure,ie. normal ma