Application certificate error during upload on Finesse

[Sheraz Saeed Lodhi]

Hi Folks,

We have signed certifcates from Certificate Authority and trying to upload them on finesse server 11.6 and able to upload the Root & Intermediate certificates but while uploading the application certificate it gives the following error.

"File '/usr/local/platform/.security/tomcat/keys/tomcat.csr' does not exist"

I have tried to run the following command to check the available certificates and the results seems this tomcat.csr doesn't exist. 

show cert list own

"tomcat/tomcat.pem: Certificate Signed by DigiCert Global Root CA
tomcat-ECDSA/tomcat-ECDSA.pem: Self-signed certificate generated by system
ipsec/ipsec.pem: Self-signed certificate generated by system
authz/authz.pem: Self-signed certificate generated by system"

Thanks 

[Slavik Bialik]

By the looks of this error, it seems like you didn't even created a CSR in the Finesse security management page. And if I'm right so YOU CANNOT upload a some signed certificate without creating a CSR first in Finesse. You can sign only the created CSR from Finesse, and it should work.

[Sheraz Saeed Lodhi]

Hi,

Is there a way to get confirmation about the csr other than commands i have used to check. I will also check with the team if they have created.

Otherwise the only option is to regenerated the CSR and ask certificate authority to provide new certificate against it. Isn't it

[geoff]

You can download a package called OpenSSL-Win64 and install it on your Windows machine. Then you can open CSRs and CERTs and see how they are configured. You can see if the cert was generated from the CSR.

Regards,

Geoff

[Sheraz Saeed Lodhi · Accepted solution]

Hi Folks,

As a quick solution i have regenerated the CSR using the cli command line i could see there was no CSR there. Got signed certificate and uploaded. Finesse is fine now.

Thanks