Hello, I have finally figured it out. It turns out that the problem was with file encoding. I am calling the est api through script and saving the key and certificate on the machine. the file needs to be in UTF8 without bom. On other versions this is happening, for some reason on windows 2008 it's taking another format and I'm converting it manually for now. However, certificates are working.
I apologize for taking so much time and after many hours it was only encoding issue. Regards, On Thu, 12 Dec 2024, 13:12 Scott Thomas, <scott_thomas...@yahoo.com> wrote: > Hi, > I think the problem doesn't lie with certificate or profiles since RSA > 2048/4096 and SHA256 were still supported on Windows Server 2008 with EOL > date of Jan 2020. Try the latest update/patch avail for Windows Server 2008. > I would recommend to configure your app with lower TLS version. > You can also share some details on my personal email scott_thomas007 AT > yahoo DOT com for further specific diagnosis. > BR > > Yahoo Mail: Search, Organize, Conquer > <https://mail.onelink.me/107872968?pid=nativeplacement&c=US_Acquisition_YMktg_315_SearchOrgConquer_EmailSignature&af_sub1=Acquisition&af_sub2=US_YMktg&af_sub3=&af_sub4=100002039&af_sub5=C01_Email_Static_&af_ios_store_cpp=0c38e4b0-a27e-40f9-a211-f4e2de32ab91&af_android_url=https://play.google.com/store/apps/details?id=com.yahoo.mobile.client.android.mail&listing=search_organize_conquer> > > On Mon, Dec 9, 2024 at 3:27 PM, Alaa Hilal > <alaahi...@gmail.com> wrote: > Hello, > > I have setup zabbix installation, where the connection is encrypted > using certificates generated by our PKIs (which is managed by openxpki). > In general, in normal cases every thing is working well. > > We are facing a problem, with one of our machines that is running with old > OS (windows server 2008). I think the cyphers supported by this version of > windows are do not include the ones that are used by openxpki. Is there a > way to create for example a new profile that would generate certificates > with older ciphering methods (I know this is not very secure but we have an > exception for this server) > > Regards, > Alaa > _______________________________________________ > OpenXPKI-users mailing list > OpenXPKI-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openxpki-users > >
_______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
