topic I checked certificate of CA in Network Access Control

ACS 5.5 and Certificate Validation Error: Certificate binding failed. No matching signing request found.

Filip Po — Mon, 11 Mar 2019 07:15:04 GMT

Dear Community,

I generate Sign Request, than sign it on CA.

Then try to upload it back but error arrise: Certificate Validation Error: 'Certificate binding failed. No matching signing request found.'

I used ACS 5.5.0.47 Patch 7.

Did anyone went through this error?

I tried use another CA, but the result is the same.

I already checked validity of CA cert.

Thank you.

Kind regards,

Filip

Hi Filip,

Kanwaljeet Singh — Wed, 23 Nov 2016 19:48:53 GMT

Hi Filip,

When you say you have checked the validity of cert, how did you check it?

You can check here if CSR and certificate are a match:

https://www.sslshopper.com/certificate-key-matcher.html

If yes, what is the format of the certificate that you are trying to upload? Supported formats are cer, der and pem.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

I checked certificate of CA

Filip Po — Wed, 23 Nov 2016 22:39:23 GMT

I checked certificate of CA if is still valid on ACS.

Thank you for link, for test purpose looks well.

I use .cer format.

Hi Filip,

Kanwaljeet Singh — Wed, 23 Nov 2016 22:47:32 GMT

Hi Filip,

You are welcome!

So when you check certificate (identity) as well as the CSR in the link provided, does it match fine?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

snimka_obrazovky_2016-11-23_o

Filip Po — Wed, 23 Nov 2016 22:48:54 GMT

Here is positive results.

Hi Filip,

Kanwaljeet Singh — Wed, 23 Nov 2016 22:59:40 GMT

Hi Filip,

So you go to "outstanding signing requests" and you see the same CSR, and then when you go here "System Administration > Configuration > Local Server Certificates > Local Certificates > Create" , you select " Bind CA certificate", browse and you get the error, corrrect?

Is it possible to share the certificate?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

Yes correct I used Bind CA

Filip Po — Wed, 23 Nov 2016 23:21:36 GMT

Yes correct I used Bind CA certificate.

I opened TAC case recently. By me it is than internal issue of ACS.

Here is the soluton: There

Filip Po — Thu, 24 Nov 2016 08:30:15 GMT

Here is the soluton: There should be only one CSR in the list! Then it worked and ACS bind CA ussued certificate to CSR.

There is no information in documentation or release notes that I have to have only one CSR in the list under System Administration > Configuration > Local Server Certificates > Outstanding Signing Requests at the time when I try to bind CA signed certificate.

Delete the all old CSR.
Please try generating another CSR. Ensure you see the CSR in Outstanding Signing Requests. Generate the certificate for this and try binding the new certificate again.