Web server certificate expiry fetch script

Looking server certificate expiry date fetch script.

You are looking for help but did not provide any details. What do you want to do *exactly*? Is this somehow ConfigMgr related?
Any chance that you have to write a script that lists the expiry data for whatever certificate?
Torsten Meringer | http://www.mssccmfaq.de

Similar Messages

Intel vPro AMT integration with SCCM 2012R2 - Issues with SCCM finding the "ConfigMgr AMT Web Server Certificate"

Good evening all,
I'm attempting to get Intel SCS integrated with SCCM 2012 R2 and I have both sides working, doing what they do best, however, I have issues when I try to mate the two. I started with a single server for the site and then tackled the Intel side with success,
then I added another site server to run the Out of Band service point and Enrollment point. Up until this point I've had no issues with certificate templates, or issuance of those certs.
I have re-read the TechNet documents a few times regarding the PKI setup, some Intel documentation and three step by step articles and non of them seem to differ so I can't understand why I'm unable to choose my "ConfigMgr AMT Web Server Certificate"
when configuring the Out of Band Management Component Properties page. The "AMT web server certificate template:" dialog shows my CA FQDN and CA name, but the certificate template list is always blank. I've tried this from both the remote
and local ConfigMgr consoles. The site servers have rights on the CA to manage and issue certs, is there something I'm missing that isn't in the documentation or buried somewhere that I missed? Is there a Application policy that should be on the
cert that isn't mentioned anywhere?
Thanks in advance!
Tesfaye

Hi Joyce,
Thanks for responding. I pretty much have this error repeating in the log file and not much else:
[28, PID:13388][05/21/2014 15:17:15] :System.DirectoryServices.DirectoryServicesCOMException\r\nThere is no such object on the server.
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at System.DirectoryServices.DirectorySearcher.FindAll()
   at Microsoft.ConfigurationManagement.AdminConsole.Common.ADUtils.EnumEnterpriseCACertificateTemplates(String domainEntryName, String certAuthorityFqdn, Boolean isServerAuthen)\r\n
I will look into this, but another hint would be greatly appreciated!
Thanks,
Tesfaye

Thawte Web Server Certificate obtained... now what?

Hi All,
We just renewed our Thawte Certificate. The instructions on their site are to copt the information into a text file then follow the server's instructions for using the certificate.
I have found in the Server Admin for that site a location for the Certificate File and one for the CA file. Which one do I have, and is it as easy to just replace those files?
TIA - Vijay

First of all, it doesn't need to be called cert.crt -- you can call it whatever you want. Whatever you name it though is how you'll have to refer to it in your site config.
To get it into that directory, open a Terminal window. I'm pretending that the certificate is on your desktop and named "cert.crt". I'm also assuming you're logged in as an administrative user.
Macintosh:~ vijay$: cd Desktop
Macintosh:~/Desktop vijay$: sudo cp cert.crt /etc/httpd/ssl.crt/
(enter your password when prompted)
That's all you need to do to get a copy of your certificate put there.
However, you'll still have to edit your site's configuration to turn on SSL and store the location of all the related files. I would try doing all this through Server Admin -- it makes the process pretty straightforward. However, if it's not enough, you can dig up some tutorials on getting SSL going on your site. Apple has this one, it's from a while ago, and you'd want to skip some of the info (since it walks you through creating your own, self-signed certificates, but you have one from Thawte).
Xserve Dual 2.3 GHz / PowerMac Dual 2 GHz Mac OS X (10.4.3)

Activating Scripting on the Web Server

I found this, but can not locate Scripting on the Web Server: Configuration page
Activating Scripting on the Web Server
To use scripting with a Web service, you must activate the functionality on the LabVIEW Web Server. In LabVIEW, select Scripting on the Web Server: Configuration page in the Options dialog box to activate scripting on the Web Server.
http://zone.ni.com/devzone/cda/tut/p/id/7738
Solved!
Go to Solution.

Hi Eric LZ
You are absolutely right, for LabVIEW 2009 scripting is activated automatically. More information about that could be found here. For LabVIEW 8.6 you'll have to follow these instructions. The above links are valid for VI scripting.
National Instruments
Carlos O
Applications Engineer

Uploading of signed certificate Server certificate and Intermediate certifi

Hello,
We are implementing SSL for the first time on NW AS JAVA 7.0. I have received signed certificate from the CA.
It contains Web server certificate and Intermediate certificate.
I guess we import the Webserver CSR response. I not sure on what is the intermediate certificate and they say it is mandatory.
Can you please guide.
Thanks.
Siddhartha

Sorry Here,
Hope I understand this correctly.
The Comodo Positive SSL is a Web certificate. Although I ask OD to use it, it didn't.
Then Profile Manager expects a "code signing" certificate which is why all it saw was Open Directory's one.
Francois

Network location server Certificate binding fails.

The certificate binding for the network location server has been modified. Without the correct certificate, connectivity for DirectAccess clients located in the internal network will not work as expected.
1. The certificate binding has been changed by another process or application.
2. The certificate is not bound to one or more IP addresses on the internal interface.
1. Ensure the certificate binding has not been modified for the network location server.
2. If you bind port 62000 with another certificate for use with a different application, ensure that the network location server is configured to use the same certificate binding as that application.
3. Ensure that the certificate is bound to all the IP addresses on the internal interface.

Hi Proactis,
If the certificate of the NLS has been modified, please try to re-issue a new certificate for NLS. Then we can reconfigure the NLS in the DirectAccess wizard.
To re-issue the certificate for NLS, please follow the steps below,
On the network location server, click Start, type mmc, and then press ENTER.
Click File, and then click Add/Remove Snap-in.
Click Certificates, click Add, select
Computer account, click Next, select Local computer, click
Finish, and then click OK.
In the console tree of the Certificates snap-in, open Certificates (Local Computer)\Personal\Certificates.
Right-click Certificates, point to All Tasks, and then click
Request New Certificate.
Click Next twice.
On the Request Certificates page, click the Web Server certificate template, and then click
More information is required to enroll for this certificate.
On the Subject tab of the Certificate Properties dialog box, in
Subject name, for Type, select Common Name.
In Value, type the fully qualified domain name (FQDN) of the network location server (for example,
nls.corp.contoso.com), and then click Add.
Click OK, click Enroll, and then click
Finish.
In the details pane of the Certificates snap-in, verify that a new certificate with the FQDN was enrolled with
Intended Purposes of Server Authentication.
For detailed information, please refer to the link below,
Install and Configure IIS for a Network Location Server Certificate
http://technet.microsoft.com/en-us/library/ee649252(v=ws.10).aspx
Then we may need to reconfigure the NLS in the DirectAccess wizard, here is the screenshot of my lab server,
Besides, don't forget to update the group policy on DirectAccess server and client.
Best Regards.
Steven Lee
TechNet Community Support

IPlanet web server 4.x on Windows 2000 fails to start after activating SSL

I have created the trust database and installed a CA root certificate and a web server certificate. When I enable SSL, the server startup takes a long time (although the log file indicates a successful startup much earliar) and then after acknowledging the information box for successful startup, on return to the server on/off page, the page shows server off.

Can you provide the error logs file of the instance which fails to start?
Thanks

SUN Java System Web Server 7.0U1 How to install certificate chain

I am trying to install a certificate chain using the SUN Java Web Server 7.0U1 HTTPS User interface. What I have tried so far:
1. Created a single file using vi editor containing the four certificates in the chain by cutting an pasting each certificate (Begin Certificate ... End Certificate) where the top certificate is the server cert (associated with the private key), then the CA that signed the server cert, then the next CA, then the root CA. Call this file cert_chain.pem
2. Go to Certificates Tab/Server Certificates
3. Choose Install
4. Cut and paste contents of cert_chain.pem in the certificate data box.
5. Assign to httplistener
6. Nickname for this chain is 'server_cert'
7. Select httplistener and assign server_cert (for some reason, this is not automatically done after doing step 5).
8. No errors are received.
When I display server_cert (by clicking on it), only the first certificate of the chain is displayed and only that cert is provided to the client during the SSL handshake.
I tried to do the same, except using the Certificate Authority Tab, since this gave the option of designating the certificate as a CA or chain during installation. When I select ed "chain," I get the same results when I review the certificate (only the first cert in the file is displayed). This tells me that entering the chain in PEM format is not acceptable. I tried this method since it worked fine with the F5 BIG-IP SSL appliance.
My question is what format/tool do I need to use to create a certificate chain that the Web Server will accept?

turrie wrote:
1. Created a single file using vi editor containing the four certificates in the chain by cutting an pasting each certificate (Begin Certificate ... End Certificate) where the top certificate is the server cert (associated with the private key), then the CA that signed the server cert, then the next CA, then the root CA. Call this file cert_chain.pemIn my opinion (I may be wrong) cut and pasting multiple begin end
--- BEGIN CERTIFICATE ---
... some data....
--- END CERTIFICATE ---
--- BEGIN CERTIFICATE ---
... some data....
--- END CERTIFICATE ---is NOT the way to create a certificate chain.
I have installed a certificated chain (it had 1 BEGIN CERTIFICATE and one END CERTIFICATE only and still had 2 certificates) and I used the same steps as you mentioned and it installed both the certificates.
some links :
[https://developer.mozilla.org/en/NSS_Certificate_Download_Specification|https://developer.mozilla.org/en/NSS_Certificate_Download_Specification]
[https://wiki.mozilla.org/CA:Certificate_Download_Specification|https://wiki.mozilla.org/CA:Certificate_Download_Specification]

Certificate request not working with web server v2 template on windows 2012 R2

I have tried to generate a certificate request on my domain joined Windows 2012 R2. I have tried both online and offline requests. I am using the web server v2 template.
Both Method fails with error message that the cryptographic algorithm is unknown. I am using these settings apart from the template:
This is the error Message in online request:
The error Message in the offline request is somewhat similar.
An event error is also appearing in the application log:
The CSPs from the template:
I am wondering if a cryptographic service provider or several of them are missing? They are installed With Windows update are they not? The strange thing is that this supposedly have worked before with another user. Could it be that I do not have the
correct permissions to request a certificate with this template, or has something happened with the server?

Hey dag
Thanks for posting ,
If You try duplicate the web template for using it in version 4 - can You see any difference?
Also check the link below for certificate templates versions:
http://social.technet.microsoft.com/wiki/contents/articles/13303.windows-server-2012-certificate-template-versions-and-options.aspx#Version_4_Certificate_Templates
In previous operating system versions the configuration of CSPs and KSPs were on different tabs in the certificate properties. For version 2 certificate templates, CSPs were configured on the Request Handling tab. For version 3 certificate templates,
KSPs were configured on the Cryptography tab. Starting in Windows Server 2012, the configuration of the providers is consolidated on the Cryptography tab. To learn more about the cryptographic provider options present in previous operating systems
Notice later.
I'd be glad to answer any question

To write a perl script for running a java program from cgi of web server

I have to write a perl script to call a java program(.exe).I want to run this file through the cgi of the web server.
java myprogram
can anyone help me to write a perl script??

It depends on what the java program does. For example, does it parse HTTP headers from standard input, or what?
Are you sure it wouldn't be easier to turn the class into a servlet? etc.
Take a look at IPC::Open2 and IPC::Open3 though. You may need them. (That's just a guess.)

Iplanet web server 7 -how to get more information when a certificate is untrusted ?

Hi
When a client tries to access to iplanet 7.0.15, we only get a line in the errors log with a simple error., for instance SSL_ERROR_UNKOWN_CA_ALERT...
We would like to know if it is possible to configure iplanet to get more information about this request..
iPLANET is receiving requests from a lot of clients and sometime it is difficult to identify the source of a error without more information..
We would like have similar information that access log shows when certificate is valid
We get the same information with log-level = info or finest..
Thanks
Uge

Hi Uge,
Setting the iPlanet Web Server log level to 'finest' will give you more information, but it is very verbose, and you still might not get the information you are looking for. You might want to try 'fine' or 'finer' first to see if either of those gives you the information you need.
With regards to the above error, SSL_ERROR_UNKOWN_CA_ALERT, this means that the client presented a certificate in the SSL handshake that was signed by a CA that the Web Server doesn't have in it's certificate database. In order to ensure the Web Server is kept upto date with the latest set of public CA certificates, I would recommend you upgrade to the latest version.
If you know that the certificates the clients are using are from an internal CA, you need to ensure the Root CA Certificate from that internal CA is installed in the Web Servers certificate database as a trusted certificate.
regards
Tracey

Procedure for Certificates if implementing Terminating SSL at web server

Hello Gurus,
We have implemented "Terminating SSL at Web Server" and have generated Certificates for the Server which hosts OHS. My doubt is
Do we need to generate Certificates for all the server that has EPM components or if it is correct if we generate Certificate only for OHS server.
Also if we also want to implement SSL for Essbase and making use of Wildcard Certs, can we add the ailas name for Essbase server to the SAN and use the same wallet on the server hosting Essbase server?
Thanks.

I meant @Policy(uri = "policy:Wssp1.2-2007-Https.xml") Also I read this article which is talking about the policy file http://chrismuir.sys-con.com/node/1075471/mobile
Couple of questions:
1. As I said in my last thread, since Verisign certificate is installed in the web server, I can view the certificate details in the browser for any https requests to that server instead of just for this webservice request. How to block/filter other requests from using the certificate when involed using https?
2. When do we need policy files?
Edited by: user8115570 on Feb 6, 2012 2:55 PM

App server , process scheduler , web server and DB scripts

Team,
Good Morning.
I am looking for the script which will help me in doing health check-up for app server , process scheduler , web server and DB.
The script should trigger a email when any one of the domain is down and when it get up.
Waiting heartly

If you really only want scripts you should write them yourself. If you don't understand the script how can you be expected to support it, modify it, or add new features? You don't even indicate what OS your using? I could give you a copy of a powershell script but what good is that on a linux box?
You need to identify what you really are interested in monitoring. Is it process health only? actual system integrity? Do you need to know if a process count goes under a certain threshold? Is the processes scheduler really working? Is queuing occurring somewhere? Is the web server at a critical number of open sessions? log monitoring for keywords? Do you need to actually simulate a web session which would prove the full system is working in one execution, although it won't indicate a failure will occur where some other monitoring might?
This is why the others have recommended pre-built packages that already offer most of this. If you still want scripts, gather your requirements, think about what you really need, try some stuff on your own, and if you have a specific problem with a script or how to accomplish a particular system check, post a new question, and I'll do my best to help. I think you'll get a better response from everyone if you do that.

SJS Web Server 6.1SP3 certificate install in VIP

Hi there,
I have just tried to install a server certificate into SJS Web Server 6.1SP3 which resides in a VIP on a clustered machine (I believe).
We created the database and certificate whilst the machine was sitting at a certain "node" (machine_namea.domain) - and sent off for the certificate.
In the meantime - the machine failed over to node z - (machine_namez.domain) - and then we tried to install the certificate. We keep getting an error stating that the key pair password is not recognised.
I realise that this is because the key pair database password was created and the certificate request was generated on a physically different machine from which we tried to install the certificate - however my question is do we need to request and install certificates for every failover node in order to https enable the webserver running in this VIP?
Any help on this matter would be greatly appreciated, as I have just had to cancel an urgent promotion as we cannot https enable the webserver :-)
Regards
bc26480

In IE, favicon will not be shown in the title bar or the addressbar as in other browsers. As its name indicates it is "Favorites Icon". If we add the web page to the favorites (ie Bookmark) then this icon will be used.
In IE,
1. Open the web page,
2. Select Favorites --> Add to Favorites
3. Now, You could see the Favicon in the Favorites menu.
May be in the later versions of IE, it may use the favicon to show up in title bar or address bar similar to other browsers...

Web server type of standalone oc4j needed for SSL Certificate

Hi,
We have a standalone oc4j 10.1.3 that hosts an application whose many of its pages use https and so we need to buy SSL certificate from any of CAs like Verisign, GeoTrust, etc.. All of these CAs are asking us about the web server type that the standalone OC4J uses. I read the following statement from this url:
http://download.oracle.com/docs/cd/B32110_01/web.1013/b28950/intro.htm#JICON100
"communications in a standalone environment is provided through the built-in *_OC4J Web server_*, which supports HTTP and HTTPS communications natively without the use of the Oracle HTTP Server"
On all of the SSL certificate systems of above CAs websites, they ask us to choose the web server type from a list of server types but I don't see OC4J web server listed and I am told that it is very important to make sure the web server type is correct otherwise the SSL Certificate that we buy may not be compatible with our web server type.
So, I like to know the exact built in web server type name that goes with Standalone OC4J or one that is closest and for which SSL Certificate is compatible.
Shown below is a list of web server types that I am asked to choose from on Verisign website.The closest to standalone oc4j according to below list is Oracle Wallet Manager but isn't this meant for Oracle Application Server (OAS) and not the standalone OC4J? we are using the java keytool to generate the CSR that we look to sign it via the verisign but again we are not sure about the web server type in the case of standalone OC4J that is not listed below. Please advice and thanks in advance to any of your responses in helping out.
Webstar 4.x
ApacheSSL mod_ssl
WebLogic 6.0
WebLogic 8.1
Cisco
ACS 3.2
Covalent
Apache ERS 2.4
Apache ERS 3.0
F5
BIG-IP
IBM
Websphere MQ
HTTP Server
Lotus
Domino 5.0
Domino 6.0
Domino 7.0
Domino 8.0
Windows NT - IIS 4.0
Windows 2000 - IIS 5.0
Windows 2003 - IIS 6.0
Windows 2008 - IIS 7.0
Exchange 2007
iPlanet 4.x
iPlanet 6.x
ScreenOS
SSL Accelerator
Oracle Wallet Manager_
Secure Web Server
SSL Offloaders
Stronghold
Java Web Server 6.x
Sun ONE
AS Server w/IIS 4
AS Server w/IIS 5
EA Server
Tomcat
Zeus

Hi Zeus,
Type of certificate depends the method you will use to deploy the certificate on your application server.
Please refer the links,
http://download.oracle.com/docs/cd/B31017_01/web.1013/b28957/configssl.htm
http://download.oracle.com/docs/cd/B14099_19/core.1012/b13995/wallets.htm#ASADM400
http://download.oracle.com/docs/cd/B14099_19/web.1012/b14013/configssl.htm
Regards,
mYth

Web server certificate expiry fetch script

Similar Messages

Maybe you are looking for