Self Signed Certificate Problems

I admit little knowledge of certificates and just need to get one installed to test the Web Proxy Server functionality.

I followed the procedures here first

http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/custom-guide/s1-secureser ver-selfsigned.html

And then tried to reuse this certificate for Web Proxy Server Version: 4.0.5 B04/18/2007 11:01

I received the following error:

Incorrect usage no private key. The server could not find the private key associated with this certificate.

I assume that this is because the keypair for this certificate is not in the certificate database I first created.

I then tried to follow the instructions here:

http://forum.java.sun.com/thread.jspa?threadID=5092677

but got an IO error. not sure why.

Would anyone know how I can either get Web Proxy Server to generate its own certificate or accept the one I generated using openssl?

I appreciate any ideas or insights.

Thanks,

Sean

[1011 byte] By [sean.wyatta] at [2007-11-27 10:18:48]
# 1

Dear Sean,

You first need to create a CSR from the proxy server. You can do that from the GUI. Once done, pass it on to openssl and get a certificate signed by the ca cert in your openssl.

~Prabu

b00m3ra at 2007-7-28 16:53:46 > top of Java-index,Web & Directory Servers,Web Servers...
# 2

Dear Sean,

From the "Request Certificate" page create a csr. You will get a string like this.

--BEGIN NEW CERTIFICATE REQUEST--

MIICtDCCAZwCAQAwbzELMAkGA1UEBhMCSU4xEjAQBgNVBAgTCWthcm5hdGFrYTES

...

ilrOO4an8WzQ2SfPl8ZleScPoIjhBbRkwOfweQVnmFkJIBYeHHuTPTC2U0pkZU0u

jCXt6mWJmt0Pe6GAcZ4SAj9AFzvtVm52DF9zvdnywU7WjjLxR7xCo2Hws6iiPCmc

DDG8hxd77ayzNg1spI6YjrJJ6kXWWGBM

--END NEW CERTIFICATE REQUEST--

save this in a file say csr.file for openssl cert generation.

run this openssl command:

openssl ca -in csr.file -out yourcert.pem

Install yourcert.pem. It should go through.

b00m3ra at 2007-7-28 16:53:46 > top of Java-index,Web & Directory Servers,Web Servers...
# 3

Thanks for this. I am still working on getting my OpenSSL configured to sign certificates.

sean.wyatta at 2007-7-28 16:53:46 > top of Java-index,Web & Directory Servers,Web Servers...