Re: Obtaining certs from Sunone webserver

Hello
I need certs/key pairs from the front end sune one webservers to be converted into pkcs12 file , as i need to give it to the enterprize hosting webservice for authentication for particular applictaion.weblogic servers are behind webservers , I do not have any idea about the passwords for key.db or cert.db or any sort of password phrase .can any one help me with clear text to convert key.db and cert.db in serverroot/alias/ into pkcs12 file
Thanks
All
Edited by: [email protected] on May 10, 2010 10:37 AM

This is an excellent link showing the steps to convert the database certificates into PKCS12 format or into PEM format .
http://support.citrix.com/article/CTX109875
Let me know if you were successfully able to convert the files or not.
thanks,
Sandeep.

Similar Messages

Testing the HTML or PEARL from SUNONE webserver

Hi,
I have installed sunone webserver6.1 in windows NT.I am new to this.i would to like to run one simple html page or Simple pearl script.i want to know where to copy the files and how to run that .how to acces that html using URL like Http://machine:port/sam.html. please help me to work on this

I have got the following error:
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[search]: Starting completed
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[]: Starting
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[]: Processing start(), current available=false
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[]: Configuring default Resources
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[]: Processing standard container startup
[26/Mar/2008:07:34:32] finer ( 7220): WebappLoader[]: WEB3106: Deploying class repositories to work directory C:\Sun\WebServer6.1\https-amrndhw372.amer.pfizer.com\ClassCache\https-amrndhw372.amer.pfizer.com\default-webapp
[26/Mar/2008:07:34:32] finer ( 7220): StandardManager[]: WEB3421: Seeding random number generator class java.security.SecureRandom
[26/Mar/2008:07:34:32] finer ( 7220): StandardManager[]: WEB3417: Seeding of random number generator has been completed
[26/Mar/2008:07:34:32] finer ( 7220): ContextConfig[]: WEB3539: ContextConfig: Processing START
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[]: Setting deployment descriptor public ID to '-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN'
[26/Mar/2008:07:34:32] finer ( 7220): ContextConfig[]: WEB3523: Missing application web.xml, using defaults only
[26/Mar/2008:07:34:32] finer ( 7220): ContextConfig[]: Scanning web.xml tag libraries
[26/Mar/2008:07:34:32] finer ( 7220): ContextConfig[]: Scanning library JAR files
[26/Mar/2008:07:34:32] finer ( 7220): ContextConfig[]: Pipeline Configuration:
[26/Mar/2008:07:34:32] finer ( 7220): ContextConfig[]: org.apache.catalina.core.StandardContextValve/1.0
[26/Mar/2008:07:34:32] finer ( 7220): ContextConfig[]: ======================
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[]: Configuring application event listeners
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[]: Sending application start events
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[]: Starting filters
[26/Mar/2008:07:34:32] finer ( 7220): WebModule[]: Posting standard context attributes
[26/Mar/2008:07:34:32] finer ( 7220): StandardWrapper[:invoker]: WEB2770: Loading container servlet invoker
[26/Mar/2008:07:34:32] info ( 7220): WEB2798: [] ServletContext.log(): WEB3946: Parent class loader is: WebappClassLoader
available:
delegate: false
repositories:
required:
----------> Parent Classloader:
sun.misc.Launcher$AppClassLoader@b179c3

Disable Pagma and Cache-Control headers in SunOne WebServer 6.1

Hi,
I want the [Pragma] and [Cache-Control] headers completely disappear from SunOne WebServer 6.1 JSP responses (like the SunOne WebServer 6.0 SP8, http/1.1 but no [Pragma] and [Cache-Control] headers), can I achieve this?
Thanks,
Harry

Hi Harry
Do you mean that WebServer 6.0 SP8 provide a way to disable these two attributes? If so, that will be a regression issue for WS6..

Problem starting the sunone webserver 6.1 sp4

Hi,
I am facing problem with starting sunone webserver 6.1 sp4.
Server is starting fine on one of the IPs configured on the box but not starting on other IPs although these IPs are pingable.I assign port nos.
I am getting following logs.
Server Start Up
Status:
*[https-test]: start failed. (0: SSL_ERROR_NO_CERTIFICATE: unable to find the certificate or key necessary for authentication)*
*[https-test]: Sun ONE Web Server 6.1SP4 B01/20/2005 17:43*
*[https-test]: fine: Emulating writev for filter http-compression*
*[https-test]: fine: Emulating sendfile for filter http-compression*
*[https-test]: fine: HTTP3063: KeepAliveTimeout is 30 seconds (default value)*
*[https-test]: fine: HTTP3067: PostThreadsEarly set to off*
*[https-test]: fine: createAdminChannel()*
*[https-test]: fine: CORE3047: Server spawned worker process 25518*
*[https-test]: fine: HTTP5169: User authentication cache entries expire in 120 seconds.*
*[https-test]: fine: HTTP5170: User authentication cache holds 200 users*
*[https-test]: fine: HTTP5171: Up to 4 groups are cached for each cached user.*
*[https-test]: info: CORE3016: daemon is running as super-user*
*[https-test]: fine: HTTP4207: file cache module initialized (API versions 1 through 1)*
*[https-test]: fine: HTTP4302: file cache has been initialized*
*[https-test]: fine: HTTP3066: MaxKeepAliveConnections set to 256*
*[https-test]: warning: CORE1251: On group ls1, servername test does not match subject "login.secure.com" of certificate Server-Cert.*
*[https-test]: warning: CORE1250: In secure virtual server https-test, urlhost test does not match subject "login.secure.com" of certificate Server-Cert.*
*[https-test]: fine: Installed configuration 1*
*[https-test]: fine: jvm stickyAttach: 1*
*[https-test]: fine: jvm option: -DJAVA_HOME=/opt/software/sunone/bin/https/jdk*
*[https-test]: fine: jvm option: -Dcom.sun.web.installRoot=/opt/software/sunone*
*[https-test]: fine: jvm option: -Dcom.sun.web.instanceRoot=/opt/software/sunone*
*[https-test]: fine: jvm option: exit*
*[https-test]: fine: jvm option: vfprintf*
*[https-test]: fine: jvm option: -Djava.security.auth.login.config=/opt/software/sunone/https-test/config/login.conf*
*[https-test]: fine: jvm option: -Djava.util.logging.manager=com.iplanet.ias.server.logging.ServerLogManager*
*[https-test]: fine: jvm option: -Xmx256m*
*[https-test]: fine: jvm option: -Djava.class.path=/opt/software/sunone/bin/https/jar/webserv-rt.jar:/opt/software/sunone/bin/https/jdk/lib/tools.jar:/opt/software/sunone/bin/https/jar/webserv-ext.jar:/opt/software/sunone/bin/https/jar/webserv-jstl.jar:/opt/software/sunone/bin/https/jar/ktsearch.jar::*
*[https-test]: fine: Emulating writev for filter j2ee-filter*
*[https-test]: fine: Emulating sendfile for filter j2ee-filter*
*[https-test]: fine: reinitializeLogger: javax.enterprise.system.core com.sun.logging.enterprise.system.core.LogStrings FINEST*
*[https-test]: fine: reinitializeLogger: null FINEST*
*[https-test]: fine: reinitializeLogger: global null FINEST*
*[https-test]: fine: reinitializeLogger: javax.enterprise.system.util com.sun.logging.enterprise.system.util.LogStrings FINEST*
*[https-test]: fine: reinitializeLogger: javax.enterprise.system.core.config com.sun.logging.enterprise.system.core.config.LogStrings FINEST*
*[https-test]: info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.4.2_04] from [Sun Microsystems Inc.]*
*[https-test]: fine: initializeServerLogger: javax.enterprise.system.core.classloading com.sun.logging.enterprise.system.core.classloading.LogStrings FINEST*
*[https-test]: fine: initializeServerLogger: javax.enterprise.system.container.web com.sun.logging.enterprise.system.container.web.LogStrings FINEST*
*[https-test]: fine: WEB7101: Naming Service has been successfully initialized.*
*[https-test]: fine: initializeServerLogger: javax.enterprise.resource com.sun.logging.enterprise.resource.LogStrings FINEST*
*[https-test]: fine: WEB7010: Resource Manager has been successfully initialized.*
*[https-test]: fine: initializeServerLogger: javax.enterprise.system.core.security com.sun.logging.enterprise.system.core.security.LogStrings FINEST*
*[https-test]: fine: Initializing configured realms.*
*[https-test]: fine: FileRealm : file=/opt/software/sunone/https-test/config/keyfile*
*[https-test]: fine: FileRealm : jaas-context=fileRealm*
*[https-test]: fine: Reading file realm: /opt/software/sunone/https-test/config/keyfile*
*[https-test]: fine: Configured realm: file*
*[https-test]: fine: NativeRealm: auth-db= null (will use default)*
*[https-test]: fine: NativeRealm : jaas-context=nativeRealm*
*[https-test]: fine: Configured realm: native*
*[https-test]: fine: LDAPRealm : directory=ldap://localhost:389*
*[https-test]: fine: LDAPRealm : base-dn=o=isp*
*[https-test]: fine: LDAPRealm : jndiCtxFactory=com.sun.jndi.ldap.LdapCtxFactory*
*[https-test]: fine: LDAPRealm : jaas-context=ldapRealm*
*[https-test]: fine: LDAPRealm : mode=find-bind*
*[https-test]: fine: LDAPRealm : search-filter=uid=%s*
*[https-test]: fine: LDAPRealm : group-base-dn=o=isp*
*[https-test]: fine: LDAPRealm : group-search-filter=uniquemember=%d*
*[https-test]: fine: LDAPRealm : group-target=cn*
*[https-test]: fine: LDAPRealm : search-bind-dn=null*
*[https-test]: fine: LDAPRealm : search-bind-password=null*
*[https-test]: fine: LDAPRealm : pool-size=5*
*[https-test]: fine: LDAPRealm : authentication=simple*
*[https-test]: fine: Configured realm: ldap*
*[https-test]: finest: Realm: getInstance returning realm :native*
*[https-test]: fine: Default realm is set to: native*
*[https-test]: fine: Application server configuration file: /opt/software/sunone/https-test/config/server.xml*
*[https-test]: fine: Application Server default locale is en*
*[https-test]: fine: Web container log level: FINEST*
*[https-test]: finer: Creating engine*
*[https-test]: finer: Adding engine (org.apache.catalina.core.StandardEngine/1.0)*
*[https-test]: info: WEB0100: Loading web module in virtual server [https-test] at [search]*
*[https-test]: finer: Creating Loader with parent class loader 'sun.misc.Launcher$AppClassLoader@67ac19'*
*[https-test]: fine: WebModule[search]: Setting delegate to false*
*[https-test]: fine: Default role is: ANYONE*
*[https-test]: fine: WEB0100: Loading web module in virtual server [https-test] at []*
*[https-test]: finer: Creating Loader with parent class loader 'sun.misc.Launcher$AppClassLoader@67ac19'*
*[https-test]: fine: WebModule[]: Setting delegate to false*
*[https-test]: fine: Successfully initialized web application environment for virtual server [https-test]*
*[https-test]: finer: Starting embedded server*
*[https-test]: finer: Naming prefixes property is set to: org.apache.naming*
*[https-test]: finer: Naming initial context factory property is set to: org.apache.naming.java.javaURLContextFactory*
*[https-test]: finer: WebModule[search]: Starting*
*[https-test]: finer: WebModule[search]: Processing start(), current available=false*
*[https-test]: finer: WebModule[search]: Configuring default Resources*
*[https-test]: finer: WebModule[search]: Processing standard container startup*
*[https-test]: finer: WebappLoader[search]: WEB3106: Deploying class repositories to work directory /opt/software/sunone/https-test/ClassCache/https-test/search*
*[https-test]: finer: WebappLoader[search]: WEB3107: Deploy JAR /WEB-INF/lib/messages.jar to /opt/software/sunone/bin/https/webapps/search/WEB-INF/lib/messages.jar*
*[https-test]: finer: StandardManager[search]: WEB3421: Seeding random number generator class java.security.SecureRandom*
*[https-test]: finer: StandardManager[search]: WEB3417: Seeding of random number generator has been completed*
*[https-test]: finer: ContextConfig[search]: WEB3539: ContextConfig: Processing START*
*[https-test]: finer: WebModule[search]: Setting deployment descriptor public ID to '-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN'*
*[https-test]: finer: WebModule[search]: Setting deployment descriptor public ID to '-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN'*
*[https-test]: finer: ContextConfig[search]: Scanning web.xml tag libraries*
*[https-test]: finer: ContextConfig[search]: URI='/search', ResourcePath='/WEB-INF/sun-web-search.tld'*
*[https-test]: finer: ContextConfig[search]: tldConfigJar(/WEB-INF/sun-web-search.tld): java.util.zip.ZipException: error in opening zip file*
*[https-test]: finer: ContextConfig[search]: URI='/jstl-fmt', ResourcePath='/WEB-INF/fmt.tld'*
*[https-test]: finer: ContextConfig[search]: tldConfigJar(/WEB-INF/fmt.tld): java.util.zip.ZipException: error in opening zip file*
*[https-test]: finer: ContextConfig[search]: Scanning library JAR files*
*[https-test]: finest: Realm name has been set to: native*
*[https-test]: finest: Realm: getInstance returning realm :native*
*[https-test]: finest: The realm native is a NativeRealm.*
*[https-test]: finer: ContextConfig[search]: Pipeline Configuration:*
*[https-test]: finer: ContextConfig[search]: org.apache.catalina.core.StandardContextValve/1.0*
*[https-test]: finer: ContextConfig[search]: ======================*
*[https-test]: finer: WebModule[search]: Configuring application event listeners*
*[https-test]: finer: WebModule[search]: Sending application start events*
*[https-test]: finer: WebModule[search]: Starting filters*
*[https-test]: finer: WebModule[search]: Posting standard context attributes*
*[https-test]: finer: StandardWrapper[search:invoker]: WEB2770: Loading container servlet invoker*
*[https-test]: info: WEB2798: [search] ServletContext.log(): WEB3946: Parent class loader is: WebappClassLoader*
*[https-test]: available:*
*[https-test]: delegate: false*
*[https-test]: repositories:*
*[https-test]: required:*
*[https-test]: ----------> Parent Classloader:*
*[https-test]: sun.misc.Launcher$AppClassLoader@67ac19*
*[https-test]:*
*[https-test]: info: WEB2798: [search] ServletContext.log(): WEB3945: Scratch dir for the JSP engine is: /opt/software/sunone/https-test/ClassCache/https-test/search*
*[https-test]: info: WEB2798: [search] ServletContext.log(): WEB3947: IMPORTANT: Do not modify the generated servlets*
*[https-test]: finer: WebModule[search]: Starting completed*
*[https-test]: finer: WebModule[]: Starting*
*[https-test]: finer: WebModule[]: Processing start(), current available=false*
*[https-test]: finer: WebModule[]: Configuring default Resources*
*[https-test]: finer: WebModule[]: Processing standard container startup*
*[https-test]: finer: WebappLoader[]: WEB3106: Deploying class repositories to work directory /opt/software/sunone/https-test/ClassCache/https-test/default-webapp*
*[https-test]: finer: StandardManager[]: WEB3421: Seeding random number generator class java.security.SecureRandom*
*[https-test]: finer: StandardManager[]: WEB3417: Seeding of random number generator has been completed*
*[https-test]: finer: ContextConfig[]: WEB3539: ContextConfig: Processing START*
*[https-test]: finer: WebModule[]: Setting deployment descriptor public ID to '-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN'*
*[https-test]: finer: ContextConfig[]: WEB3523: Missing application web.xml, using defaults only*
*[https-test]: finer: ContextConfig[]: Scanning web.xml tag libraries*
*[https-test]: finer: ContextConfig[]: Scanning library JAR files*
*[https-test]: finest: Realm name has been set to: native*
*[https-test]: finest: Realm: getInstance returning realm :native*
*[https-test]: finest: The realm native is a NativeRealm.*
*[https-test]: finer: ContextConfig[]: Pipeline Configuration:*
*[https-test]: finer: ContextConfig[]: org.apache.catalina.core.StandardContextValve/1.0*
*[https-test]: finer: ContextConfig[]: ======================*
*[https-test]: finer: WebModule[]: Configuring application event listeners*
*[https-test]: finer: WebModule[]: Sending application start events*
*[https-test]: finer: WebModule[]: Starting filters*
*[https-test]: finer: WebModule[]: Posting standard context attributes*
*[https-test]: finer: StandardWrapper[:invoker]: WEB2770: Loading container servlet invoker*
*[https-test]: info: WEB2798: [] ServletContext.log(): WEB3946: Parent class loader is: WebappClassLoader*
*[https-test]: available:*
*[https-test]: delegate: false*
*[https-test]: repositories:*
*[https-test]: required:*
*[https-test]: ----------> Parent Classloader:*
*[https-test]: sun.misc.Launcher$AppClassLoader@67ac19*
*[https-test]:*
*[https-test]: finer: WebModule[]: Starting completed*
*[https-test]: fine: Adding web module : context = /search, location = /opt/software/sunone/bin/https/webapps/search*
*[https-test]: fine: adding pattern "/advanced" for resource "AdvSearchServlet"*
*[https-test]: fine: adding pattern "/servlet/*" for resource "invoker"*
*[https-test]: fine: adding pattern "*.jsp" for resource "jsp"*
*[https-test]: fine: Adding web module : context = , location = /opt/software/sunone/docs*
*[https-test]: fine: adding pattern "*.jsp" for resource "jsp"*
*[https-test]: fine: adding pattern "/servlet/*" for resource "invoker"*
*[https-test]: fine: Waiting until the server is ready*
*[https-test]: startup failure: could not bind to 172.26.51.90:443 (Cannot assign requested address)*
*[https-test]: failure: HTTP3127: [LS ls1] https://172.26.51.90:443: Error creating socket (Cannot assign requested address)*
*[https-test]: failure: HTTP3094: 1 listen sockets could not be created*
*[https-test]: failure: CORE3186: Failed to set configuration*
*[https-test]: failure: server initialization failed*
Please suggest/help.
Regards,
Ashfaque

The error message "Cannot assign requested address" means exactly that: Web Server has been configured to listen for requests on an IP address for which your operating system is not configured. You can a) change your Web Server configuration so it listens on 0.0.0.0 (meaning all configured IP addresses), b) change your Web Server configuration so it listens on a specific IP address for which your operating system is configured, or c) configure your operating system for IP address 172.26.51.90.
The problem is not related to certificates or ports.

Sunone webserver(proxy) --SSL- weblogic

In our environment we are using Sunone webserver 7.0.9 as a proxy server to forward the request to the weblogic server 10.3.3. Now the requirement is to secure the communication between the proxy and weblogic server. As a standard way we can configure the proxy server to use SSL in obj.conf as below:
<Object name=”weblogic” ppath=”*/DefaultWebApp/*”>
Service fn=wl_proxy WebLogicHost=”myIP WebLogicPort=”mySSLPort SecureProxy=”ON” Debug=”ALL” WLLogFile=”/home/support/IPlanet60SP5/server/logsupport.txt” TrustedCAFile=”/home/support/IPlanet60SP5/TrustedCA.pem” RequireSSLHostMatch=”true”
</Object>
My question is when we have installed a self signed certificate on weblogic, how do we trust that certificate in the proxy server. If it was a third party certificate we can get the root CA certificate that can be added as trust entry in the obj.conf. But in self signed case we do not have a intermediate or root certificate. So how do we trust the self signed server certificate in the proxy server.

851935 wrote:
In our environment we are using Sunone webserver 7.0.9 as a proxy server to forward the request to the weblogic server 10.3.3. Now the requirement is to secure the communication between the proxy and weblogic server. As a standard way we can configure the proxy server to use SSL in obj.conf as below:
<Object name=”weblogic” ppath=”*/DefaultWebApp/*”>
Service fn=wl_proxy WebLogicHost=”myIP WebLogicPort=”mySSLPort SecureProxy=”ON” Debug=”ALL” WLLogFile=”/home/support/IPlanet60SP5/server/logsupport.txt” TrustedCAFile=”/home/support/IPlanet60SP5/TrustedCA.pem” RequireSSLHostMatch=”true”
</Object>
My question is when we have installed a self signed certificate on weblogic, how do we trust that certificate in the proxy server. If it was a third party certificate we can get the root CA certificate that can be added as trust entry in the obj.conf. But in self signed case we do not have a intermediate or root certificate. So how do we trust the self signed server certificate in the proxy server.Just import the self signed cert as trusted.

Loading ldap sdk 51 dlls from a webserver module

Hi ,
I have sunone webserver 4.1 SP9 running on my NT system. I have written a module using NSAPI which
loads (using loadlibrary) another module. This module depends on ldapsdk 51 dlls. It loads the sdk libs
properly. But somehow my first call to "ldap_simple_bind_s" does not return. It keeps waiting on some
condition in "libnspr3.dll" loaded by the webserver for its own purpose.
The stack trace is as follows:
NTDLL! 77f682db()
KERNEL32! 77f04f37()
LIBNSPR3! 30019517()
LIBNSPR3! 30019e35()
NSTIME! 00261111()
This happens ONLY when my module is talking to the DS in SSL and ONLY for the first request. A second
request goes fine. I have also tried pre-loading the sdk libraries but to no avail.
Any idea why the first calls enters libnspr3.dll rather than entering lbnspr4.dll. This problem is
definitely because of the webserver loading the nspr3.dll as similar module on IIS works properly.
Is this a known problem or is there any solution/patch that addresses this issue.
Any pointers?
Thanks in advance.
-Achyut.

Hi Chris,
Thanks for your reply.
After further debugging, I have some more information. For this thread, the first bind call goes thru but then the thread tries to acquire the handle again, the bind call does not return back. The call stack I sent yesterday was for the wrong thread. Sorry about that. The correct stack trace is:
NTDLL! 77f67f77()
LIBNSPR4! 090488ce()
00528700()
0052ad20()
0052aab0()
0052ca50()
LIBNSPR4! 090582c0()
00528700()
0052ad20()
0052aab0()
0052ca50()
LIBNSPR4! 090582c0()
This does not seem to give much information apart from the fact that this does not seem to be problem with co-existence of the nspr dlls of diff. versions.
Ideally, any plugins running in an iWS 4.1 server would link against the NSPR and LDAPSDK versions bundled with the server. The relevant header files and import libraries are published to the web server's plugins/include and plugins/lib directories.[Achyut] We have a requirement and we need to support ldap sdk 51 with our product. Is there any alternative to this? As in, some SP for the same webserver version which will bundle sdk 51 along with it.
>
You can try adding the following directive to the server's config/magnus.conf file:
KernelThreads 1[Achyut] I tried this but the problem still persisted.
Ultimately, though, mixing and matching NSPR and LDAPSDK versions is simply not guaranteed to work...[Achyut] Is there any service pack for the webserver version (4.1) that bundles ldap sdk 51?
Thanks again.
-Achyut.

Cron Job to start SunOne WebServer

Hello,
I installed the SunOne Webserver in Linux AS 4 as OS level. I try to create a cron job to stop and start the WebSever every night. The stop is quite simple to create a cron job. However, the start script is a bit tricky since I will have to key in the Token (password) as I manual start the script. How do I create a cron job to start the Web Server like this?
I used the Web server to do datatel's webadvisor. I just don't know how to configure the SunOne Web Server 6.1 (SP5) to the best interface with webadvisor. Does any one have this kind of experience please share with me?
Your thought would be greatly appreciated!!!!

mle wrote:
Hello,
I installed the SunOne Webserver in Linux AS 4 as OS level. I try to create a cron job to stop and start the WebSever every night. Why on earth would you want to do that? This is Linux, not Windows.
My guess is that you have memory leaks that benefit from a bounce to set the clock back to zero on a daily basis.
My advice would be to fix the leaks and don't bounce the server that way.
If the leaks originate with the app server, get one that doesn't leak.
Does any one have this kind of experience please share with me?Sounds like a very bad idea. I'd fix the root problem first.
%

ACS SE - Public Cert from RapidSSL

I am attempting to authentication wireless clients via WLC6 via ACS SE 4.2 and this forum has provided me more information than Cisco Documentation.
In trying to obtains a 30day free trial cert from RapidSSL.com, When I submit my CSR, Rapidfire tells my that my common name is not a FQDN, I am using "acs-se.domainname.loc". Is it the .LOC that is causing my problems? Is there a way around that? I have tried downloading a cert my windows primary DC, had issues with my CRL and CTL. Basically I could not get the ACS SE to trust my Windows Cert. I am finding PEAP and EAP-FAST to be more difficult than it really should be.
Thanks
Charlie

JG,
Thanks for your response. RapidSSL would not allow a Private FQDN that ends in .LOC such as mine.
I ended up following this procedure that covers 95% of what you need for a Private Cert from my MS DCs.
http://www.cisco.com/en/US/products/sw/secursw/ps5338/products_configuration_example09186a008020a45c.shtml
My Wireless supplicants can now successfully authenticate using PEAP without monkeying around with CERTs on the client side.
Thanks
Charlie

Adobe Bridge CC cannot obtain files from this device.

I am getting this error message when I attempt to upload videos to my Mac from my Canon 7D:
Adobe Bridge CC cannot obtain files from this device. Please be sure the device is properly plugged in and the battery is full charged.
Battery is full charged and camera is connected properly. I have restarted the camera, Bridge, and the computer as well. I tried reinstalling Bridge and it allowed me to upload 3 of the video files. Then the error message came back. There were a few RAW images on the camera that I was able to upload, but when I tried the video again I got the error message. I read a post about renaming the folder that you are saving to as a fix. I tried that as well, but it did not work.
Any help would be greatly appreciated! Thanks!
-J

This excerpt is from a long-gone post by author Bruce Fraser:
Bruce Fraser - 4:17pm Jun 14, 04 PST (#5 of 21) Opening files directly from the camera is a bad idea for a variety of reasons*, and it most certainly isn't faster than using a FireWire or USB2 card reader.
        • Drains the camera battery
        • Runs the risk of the software you're using to open the images writing to the card and destroying the format
        • Runs a small but significant risk of USB power frying the camera
• runs the risk of wearing out the camera's connector,
• Slowest method known to mankind of getting images off a CF or SD card

Swf file wont play from httpserver, windows opens up but doesn't play, but works fine from SunOne

We currently migrating over to http server from SunOne web server. When you run the launch.html file an additional browser window opens but the swf doesn't not start playing.
The new http server is using exactly the same doc root as SunOne.
I have swf in the mime types and i've checked all the permissions .
Conf File
Include /opt/IBM/WebSphere/HTTPServer/conf/httpd.conf
Listen 1xxxx
DocumentRoot "/www/edc/docs"
<Directory />
    Options FollowSymLinks
    AllowOverride None
</Directory>
<Directory "/www/edc/docs">
    Options FollowSymLinks
</Directory>
######### DirectoryIndex ############################################
directoryIndex index.html index.htm
IndexOptions FancyIndexing VersionSort
########## Pidfile location,Error and Access Logs #####################
PidFile /opt/IBM/WebSphere/HTTPServer/logs/edc/httpd.pid
ErrorLog "|/opt/IBM/WebSphere/HTTPServer/bin/rotatelogs /opt/IBM/WebSphere/HTTPServer/logs/edc/error_%Y-%m-%d-%H:%M 86400 -360"
CustomLog /opt/IBM/WebSphere/HTTPServer/logs/edc/access_log common
CustomLog "|/opt/IBM/WebSphere/HTTPServer/bin/rotatelogs /opt/IBM/WebSphere/HTTPServer/logs/edc/access_%Y-%m-%d-%H:%M 86400 -360" common
LogLevel warn
# The following directives define some format nicknames for use with a CustomLog directive
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
Alias /icons/ "/opt/IBM/WebSphere/HTTPServer/icons/"
<Directory "/opt/IBM/WebSphere/HTTPServer/icons">
    Options Indexes MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

Hi,
I would suggest you read the following thread:
Windows Media Server Did not Accept HTTP or RTSP streams???
http://social.technet.microsoft.com/Forums/en-US/winservermedia/thread/b3f4f8c9-ac36-49e6-adc7-21e744d2e28f
In addition, please check whether the following blog could help:
Play "mms" and "rtsp" Streams in Windows Media Player
Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Thanks,
Vincent Wang
TechNet Community Support

Move SSL Cert from one device to another on Cisco ASA

Hello Everyone,
Is it possible to move SSL certificate + Key from one cisco asa to another ? I hope its possible and if someone can guide me towards correct documentation that would be perfect.
thank you
Manish

We have an ASA5550 running 8.2(5) that we're using as a VPN terminator; it died yesterday when we had a power glitch in the data center, and we're temporarily installing a spare 5510 (we don't have a spare 5550) until it's replaced. But the RSA keys on the spare don't match the ones on the old firewall, so when we try to install the old cert it fails:
ERROR: Keypair cannot be found for trustpoint UMVPN3-INCOMMON-MAY2020.
The old ASA is dead, so we can't do a straight export/import - all we have to work with is what's in yesterday's config backup...
I gather there's no way to extract the original keys from this; is there any way to recover in this case? Or must we export the certs from the ASAs with a "crypto ca export" and save copies of these in a secure location?

"evdre encountered a problem retrieving data from the webserver"

Hi
We are using a big report which takes very long time to expand and sometimes we get the error message "evdre encountered a problem retrieving data from the webserver" when expanding the report, but not very often for most of our users. But we have one user who gets this error message almost every second time he expands the report. This user have a computer with same capacity as the rest of us, can there be some setting on the computer or in the client installtion the cause this problem?
We are using BPC 5.1 SP 5
/Fredrik

Hi,
This error occurs usually if we have huge data in combination of our dimensions.
Even, if the selection of your memberset is not apt to the combination of the data present in the back end, you may encounter a data retrival error.
regards
sashank

Adobe Bridge cs5 cannot obtain files from this device.

I download photos to my computer using a Kingston downloading device.
Since installing Mavericks the above message comes up and will not carry out the download.
Is this a known problem with Mavericks and is there a remedy?
I would say that using the same device my photos download perfectly on my MacBook Pro.
Messages
1. Adobe Bridge CS5.1 cannot obtain files from this device.
Please ensure that the device is connected properly and that the battery is charged and try again.
2.I also get a message telling me that the "disk was not ejected propery" which is not the case.

Thanks Eric
The MacBook Pro is not running Mavericks and sorry about the double post.
I have actually solved the problem and the answer might be of use to others with the same problem.
There is a firmware update that will correct the problem.
It's at
http://www.kingston.com/en/support/technical/products?model=fcr-hs3
There is a small catch in that the firmware update can only be done on a Windows machine but I have been told that once this is done it can be used with OSX9 .I have just done the download but I haven't checked this out yet.

How to call servlets in sunone webserver

hi,
I am using sunone web server , I deployed but how to call servlets in sunone webserver any one tell me
bye

Typical URL structure is like this:
http://<myServer>:<myPort>/servlet/<fully qualified class name of my servlet>Unless you have configured a different servlet mapping ...

Is there any API to add and remove certs from acrobat trusted identities?

Is there any API to add and remove certs from acrobat trusted identities? if this is not possible any work around for this. Please help me

No, there is not – that would be a security concern.

Re: Obtaining certs from Sunone webserver

Similar Messages

Maybe you are looking for