Another nice CSR decoder: 
https://www.networking4all.com/en/support/tools/csr+check/


-----Original Message-----
From: cisco-voip [mailto:[email protected]] On Behalf Of Jason 
Aarons (AM)
Sent: Thursday, February 5, 2015 12:08 PM
To: Gary Parker; [email protected]
Cc: Cisco VOIP
Subject: Re: [cisco-voip] 10.5.1 UCCX Certificate for Finesse

I've run into this before TX vs Texas

Use this to view your CSR and then fix via the set web-security commands etc

http://certlogik.com/decoder/




-----Original Message-----
From: cisco-voip [mailto:[email protected]] On Behalf Of Gary 
Parker
Sent: Thursday, February 5, 2015 11:55 AM
To: [email protected]
Cc: Cisco VOIP
Subject: Re: [cisco-voip] 10.5.1 UCCX Certificate for Finesse


> On 5 Feb 2015, at 16:37, Jose Colon II <[email protected]> wrote:
> 
> I am trying to generate certificate request from 10.5.1 UCCX box and the cert 
> it generates is not working with verasign. It tells me "The State Name in the 
> CSR cannot be abbreviated"
> 
> Anyone have any suggestions?

Hi Jose, have a look at your CSR using:

openssl req -text -noout -verify -in CSR.csr

where CSR.csr is your csr file.

Mine, for example, reads:

        Subject: C=GB, ST=Leicestershire, L=Loughborough, O=Loughborough 
University, OU=ITS, 
CN=tainter.lboro.ac.uk/serialNumber=xxxxxxxxxxxxxxxxxxxxxxxxx

On the “Subject:” line is the entry for ST= an abbreviated version of your 
State name? If so I’d imagine you’ll have to login on the command line for the 
server and use “set web-security” to change the State to a proper value.

If I had ST=Leics it would also likely fail.

Be aware that this *may* make you have to relicense the server (I’m not sure if 
changing state is enough to trigger this).


---
/-Gary Parker----------------------------------f--\
|     Unified Communications Service Manager      |
n       Loughborough University IT Services       |
|     Tel: +441509635635  Mob: +447989172258      o
|     http://delphium.lboro.ac.uk/pubkey.txt      |
\r----------------------------------------------d-/




_______________________________________________
cisco-voip mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/cisco-voip

_______________________________________________
cisco-voip mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/cisco-voip

Reply via email to