Verified Answers

If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it! Learn more

  • State Not Answered
  • Replies replies
    41
  • Subscribers subscribers
    19
  • Views views
    369
  • Users 0 members are here
  • Locked Locked
Related
Options
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NW 65 and DigiCert

MigrationDeletedUser
We have a NW 6.5 SP8 server that we need to updated the SSL Cert on. I have generated the CSR request and received the SSL Cert from DigiCert. I imported the the info into the object that I created for the CSR request. Everything is validfor the Trusted Root and Public Key certificates.

However when I use the SSL Cert checker from DigiCert I get the following error messages:


SSL Certificate is expired.

The certificate was valid from 12/18/2008 through 12/18/2009.

It is also showing the wrong serial number for the cert.


SSL Certificate is not trusted

The certificate is not signed by a trusted authority (checking against Mozilla's root store). If you bought the certificate from a trusted authority, you probably just need to install one or more Intermediate certificates. Contact your certificate provider for assistance doing this for your server platform.

I have modified the nwconfig file to use the new SSL cert as well as the conf files for Apache.

Does NW 6.5 work with wilcard certs?

Thanks,
Nancy
Parents
  • 0
    There are some NDS objects for expired certs still in the same container as the new cert. Would that be causing any problems?
  • 0 in reply to MigrationDeletedUser
    N kerr,
    > There are some NDS objects for expired certs still in the same container
    > as the new cert. Would that be causing any problems?

    No, as long as you have the correct certificate specified in the listen
    statememt of httpd.conf. Just for laughs, try changing the name there to
    something invalid, add a char or so, unload apache, load apache. In this
    case Apache should not load and an error should be written into
    startup.err

    --
    Anders Gustafsson (NKP)
    The Aaland Islands (N60 E20)

    Have an idea for a product enhancement? Please visit:
    http://www.novell.com/rms

  • 0 in reply to Anders Gustafsson
    Apache did not load when I added an extra character to cert name. When I type in https://web site I get the following error message.

    There is a problem with this website's security certificate.


    Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
    We recommend that you close this webpage and do not continue to this website.
    Click here to close this webpage.
    Continue to this website (not recommended).
    More information


    If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting.
    When going to a website with an address such as https://example.com, try adding the 'www' to the address, https://www.example.com.

    For more information, see "Certificate Errors" in Internet Explorer Help.

    According to Didicert the SSL cert on the server is still expired and is not trusted.
  • 0 in reply to Anders Gustafsson
    Apache did not load when I added an extra character to cert name. When I type in https://web site I get the following error message.

    There is a problem with this website's security certificate.


    Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
    We recommend that you close this webpage and do not continue to this website.
    Click here to close this webpage.
    Continue to this website (not recommended).
    More information


    If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting.
    When going to a website with an address such as https://example.com, try adding the 'www' to the address, https://www.example.com.

    For more information, see "Certificate Errors" in Internet Explorer Help.

    According to Didicert the SSL cert on the server is still expired and is not trusted.
  • 0 in reply to MigrationDeletedUser
    N kerr,
    > Apache did not load when I added an extra character to cert name. When
    > I type in https://web site I get the following error message.

    OK. Then we have something. If you look at that cert in ConsoleOne, or
    iManager, what dates do you see? Ie the same old dates or the
    certificate's new dates?

    --
    Anders Gustafsson (NKP)
    The Aaland Islands (N60 E20)

    Have an idea for a product enhancement? Please visit:
    http://www.novell.com/rms

  • 0 in reply to Anders Gustafsson
    When I view the info for the object in NDS I see the correct dates (what it should be for the Digicert).
Reply Children

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.