Hello everybody,

I have bought a wildcard certificate with CN=*.portal.example.com and
subjectAltName=DNS:portal.scallab.nl.

This is because I use Web Forwardings with Host-Based Reverse Proxy
and Active DNS.

However when I try to import with Step 1 - Import Key Type > A reply
from a certification authority the import fails because the jave
keytool says the cert is not a match! (see the attachement)

How can I import my certificiation keys or make the key validation by
jave work?

I think the error is there becaue openvpn-als is running on
portal.example.com but the CN is for *.portal.example.com with
portal.scallab.nl supported as subjectAltName.

Can somebody help me?

Thank in advance,

Kind regards,

Jelle
03-02-2010 18:03:34 [main-4] INFO  SshPrivateKeyFile - Parsing private key file
03-02-2010 18:03:34 [main-4] INFO  SshPrivateKeyFormatFactory - Loading private 
key formats
03-02-2010 18:03:34 [main-4] INFO  SshKeyPairFactory - Loading public key 
algorithms
03-02-2010 18:03:34 [main-4] INFO  SshPrivateKeyFile - Parsing private key file
03-02-2010 18:05:50 [main-4] INFO  KeyStoreManager - Importing certificate for 
server-certificate from /tmp/uploadedFile2461010297118795577
03-02-2010 18:05:51 [main-4] ERROR CommandRunner - Command 
'/usr/lib/jvm/java-6-sun-1.6.0.12/jre/bin/keytool' failed with exit code 1
03-02-2010 18:05:51 [main-4] ERROR CommandRunner - Start of command output ---->
03-02-2010 18:05:51 [main-4] ERROR CommandRunner - keytool error: 
java.lang.Exception: Public keys in reply and keystore don't match
03-02-2010 18:05:51 [main-4] ERROR CommandRunner - <---- End of command output
03-02-2010 18:05:51 [main-4] ERROR KeyStoreManager - Failed to import 
certficate.
java.lang.Exception: Command returned exit code 1. Check the logs for more 
detail.
------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Openvpn-als-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-als-devel

Reply via email to