Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - hwahrmann

Pages: [1]
1
Other modules / Signing a CSR?
« on: August 05, 2020, 04:31:17 pm »
Hi,

how would i sign a CSR?
in the UI i can only generate a cert directly.

thanks,

Helmut

2
Other modules / Re: Getting rid of nsComment in a Generated Certificate
« on: December 09, 2019, 09:00:11 am »
You are my hero. That worked perfect.

Might be good to get rid of this standard comment, because Java 11 doesn't like it, if you want to use such a cert for secure connections to a server.

3
Hi,

i have commented out all lines with "nsComment" in /var/lib/zentyal(conf/openssl.cnf and restarted the ca module.
However all my generated Certificates still contain "Netscape Comment = OpenSSL Generated Certificate"

Seems that Java 11 doesn't like that in Server certificates as it throws a "Netscape cert type does not permit use for SSL server".
as the above mentioned nsComment is the only Netscape related value in the cert, i guess this is the problem.

Any idea, how i could remove that or where it comes from?

thanks,

Helmut

Pages: [1]