Hello everybody,
I have bought a wildcard certificate with CN=*.portal.example.com and
subjectAltName=DNS:portal.scallab.nl.
This is because I use Web Forwardings with Host-Based Reverse Proxy
and Active DNS.
However when I try to import with Step 1 - Import Key Type > A reply
from a certification authority the import fails because the jave
keytool says the cert is not a match! (see the attachement)
How can I import my certificiation keys or make the key validation by
jave work?
I think the error is there becaue openvpn-als is running on
portal.example.com but the CN is for *.portal.example.com with
portal.scallab.nl supported as subjectAltName.
Can somebody help me?
Thank in advance,
Kind regards,
Jelle
03-02-2010 18:03:34 [main-4] INFO SshPrivateKeyFile - Parsing private key file
03-02-2010 18:03:34 [main-4] INFO SshPrivateKeyFormatFactory - Loading private
key formats
03-02-2010 18:03:34 [main-4] INFO SshKeyPairFactory - Loading public key
algorithms
03-02-2010 18:03:34 [main-4] INFO SshPrivateKeyFile - Parsing private key file
03-02-2010 18:05:50 [main-4] INFO KeyStoreManager - Importing certificate for
server-certificate from /tmp/uploadedFile2461010297118795577
03-02-2010 18:05:51 [main-4] ERROR CommandRunner - Command
'/usr/lib/jvm/java-6-sun-1.6.0.12/jre/bin/keytool' failed with exit code 1
03-02-2010 18:05:51 [main-4] ERROR CommandRunner - Start of command output ---->
03-02-2010 18:05:51 [main-4] ERROR CommandRunner - keytool error:
java.lang.Exception: Public keys in reply and keystore don't match
03-02-2010 18:05:51 [main-4] ERROR CommandRunner - <---- End of command output
03-02-2010 18:05:51 [main-4] ERROR KeyStoreManager - Failed to import
certficate.
java.lang.Exception: Command returned exit code 1. Check the logs for more
detail.
------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Openvpn-als-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-als-devel