Dear all,
after I created the CSR I imported the cert and it works. But the certchain is not working. So the cert ist still untrusted.
What do I need to do to solve that. I also copied all cert together but it still not work as i see here:
- Opened “P7B” file.
- Exported both the intermediate CA and the root CA certificates as Base-64 encoded X.509.
- Combined exported CA certificates. I did this by simply opening both files with Notepad++. Then, I copied each, with intermediate first and root second, into one new file. Gave the file suffix “cer”.
- Imported into NCS over an SSH connection using the command “ncs key importcacert CA-Certs cacerts.cer repository ncs-ftp-repo“, where CA-Certs was the description I gave to the CA, cacerts.cer was the combined certificates file, and ncs-ftp-repowas the repository where I put the combined certificate file. That repository had been created earlier. This should result in ouput similar to the following:
- INFO: no staging url defined, using local space. rval:2
- The WCS server is running
- Changes will take affect on the next server restart
- Importing certificate to trust store
http://netboyers.wordpress.com/2012/03/05/ncs-ssl-administration-certificate/
The strange is, when I deleted all certs and restart the CPI1.3 the system still uses one of my cert. why?
regards,
Sebastian
