RE: renewing certificate
Just to let everyone know, this project is on hold for the forseeable future. We are looking at an alternative way to setup the reverse proxy and certificate that falls more into the realm of what we as Microsoft guys are familiar with. I.E. IIS based sites and certs. Thanks for the input though. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark H. Wood Sent: Tuesday, April 17, 2007 9:20 AM To: openssl-users@openssl.org Subject: Re: renewing certificate I went to www.microsoft.com and searched for "IIS install certificate". The first hit led me to: http://msdn2.microsoft.com/en-us/library/ms751408.aspx with step-by-step instructions. (Ignore the leading part about 'makecert', of course -- you already have a certificate.) -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
RE: renewing certificate
This is well and good, except the website and certificate aren't being managed by IIS, but some other open source app that I can find even less information on than openssl. The common thread between them is they both have the same instructions on how to create/install/renew the certificate using openssl command line options. Which unfortunately aren't working, most likely due to the fact I don't have enough info on this and don't know how to use either program. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark H. Wood Sent: Tuesday, April 17, 2007 9:20 AM To: openssl-users@openssl.org Subject: Re: renewing certificate I went to www.microsoft.com and searched for "IIS install certificate". The first hit led me to: http://msdn2.microsoft.com/en-us/library/ms751408.aspx with step-by-step instructions. (Ignore the leading part about 'makecert', of course -- you already have a certificate.) -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
Re: renewing certificate
I went to www.microsoft.com and searched for "IIS install certificate". The first hit led me to: http://msdn2.microsoft.com/en-us/library/ms751408.aspx with step-by-step instructions. (Ignore the leading part about 'makecert', of course -- you already have a certificate.) -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpG5qCJimR4Z.pgp Description: PGP signature
RE: renewing certificate
> The problem is with installing it on the server. It is a windows > 2003 server with II6, however the certificate isn't being handled > by IIS. I have no real clue how this thing was set up so I'm > grasping at straws. Gotta love clients that hire college kids to > do work, then are stuck when the kid moves on and no one knows > how he did what he did. You're almost certainly posting to the wrong list. The problem is, since you don't know what piece of software you need to deal with, you don't know what the right list would be. I would suggest that you first recognize that your problem is that you don't know what piece of software is managing the certificate or providing it to the web server. So you should try to provide information that might help someone to determine that. For example: 1) What process owns port 445 on your machine? 2) What headers do you get in a secure connection and how do they differ from the headers in an insecure connection? 3) Can you find your key/certificate in your filesystem anywhere? If so, what path? Or is it in the system certificate store? 4) Are there any administration pages or the like that you know of that relate to the secure web server at all? What are there names? What text is on them? DS __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
RE: renewing certificate
I have the renewed cert, I just can't figure out how to get it on the server. If IIS was managing the certificate and the websites on this server I'd be fine, but that isn't the case. I'm grasping at straws trying to follow up undocumented work by a college kid for this client. Yay for me! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Angus Sent: Tuesday, April 17, 2007 3:54 AM To: openssl-users@openssl.org Subject: Re: renewing certificate You might try the customer service dept. of the supplier who is providing your cert. Most are very good and will be able to help you do only what you need -- without a large number of time consuming extra steps. Bill Angus, MA - Original Message - From: Bart Heller<mailto:[EMAIL PROTECTED]> To: openssl-users@openssl.org<mailto:openssl-users@openssl.org> Sent: Monday, April 16, 2007 12:11 PM Subject: renewing certificate Hey everyone. I'm still not so into this so here I go again. I am trying to rewenew an expeired certificate on a windows server 2003 machine. None of the steps in the RenewCert.txt document seem to apply. I did not set this server up originally and I need lots of help trying to figure this thing out. Here is the list of things I need to know: How to revoke the existing certificate - If you browse to the URL this server hosts, the certificate date is still the expired one. How to update the certificate on the server so the URL the outside world sees is up to date. I have the CSR and private key saved in a separate folder from the original install so I hope that helps. Thanks!! And no obviously I'm not a webadmin, so bear with me please.
RE: renewing certificate
The problem is with installing it on the server. It is a windows 2003 server with II6, however the certificate isn't being handled by IIS. I have no real clue how this thing was set up so I'm grasping at straws. Gotta love clients that hire college kids to do work, then are stuck when the kid moves on and no one knows how he did what he did. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Schwartz Sent: Monday, April 16, 2007 4:52 PM To: openssl-users@openssl.org Subject: RE: renewing certificate > I am trying to rewenew an expeired certificate on a windows > server 2003 machine. None of the steps in the RenewCert.txt > document seem to apply. I did not set this server up originally > and I need lots of help trying to figure this thing out. Is your problem obtaining the renewed certificate or installing it on the server? If the latter, why are you asking on an OpenSSL list? These are questions about how to operate whatever web server software you are using. DS __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
Re: renewing certificate
You might try the customer service dept. of the supplier who is providing your cert. Most are very good and will be able to help you do only what you need -- without a large number of time consuming extra steps. Bill Angus, MA - Original Message - From: Bart Heller To: openssl-users@openssl.org Sent: Monday, April 16, 2007 12:11 PM Subject: renewing certificate Hey everyone. I'm still not so into this so here I go again. I am trying to rewenew an expeired certificate on a windows server 2003 machine. None of the steps in the RenewCert.txt document seem to apply. I did not set this server up originally and I need lots of help trying to figure this thing out. Here is the list of things I need to know: How to revoke the existing certificate - If you browse to the URL this server hosts, the certificate date is still the expired one. How to update the certificate on the server so the URL the outside world sees is up to date. I have the CSR and private key saved in a separate folder from the original install so I hope that helps. Thanks!! And no obviously I'm not a webadmin, so bear with me please.
RE: renewing certificate
> I am trying to rewenew an expeired certificate on a windows > server 2003 machine. None of the steps in the RenewCert.txt > document seem to apply. I did not set this server up originally > and I need lots of help trying to figure this thing out. Is your problem obtaining the renewed certificate or installing it on the server? If the latter, why are you asking on an OpenSSL list? These are questions about how to operate whatever web server software you are using. DS __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]