RE: renewing certificate

2007-04-18 Thread Bart Heller
This is well and good, except the website and certificate aren't being managed 
by IIS, but some other open source app that I can find even less information on 
than openssl. The common thread between them is they both have the same 
instructions on how to create/install/renew the certificate using openssl 
command line options. Which unfortunately aren't working, most likely due to 
the fact I don't  have enough info on this and don't know how to use either 
program.



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark H. Wood
Sent: Tuesday, April 17, 2007 9:20 AM
To: openssl-users@openssl.org
Subject: Re: renewing certificate

I went to www.microsoft.com and searched for IIS install certificate.  The 
first hit led me to:

  http://msdn2.microsoft.com/en-us/library/ms751408.aspx

with step-by-step instructions.  (Ignore the leading part about 'makecert', of 
course -- you already have a certificate.)

--
Mark H. Wood, Lead System Programmer   [EMAIL PROTECTED]
Typically when a software vendor says that a product is intuitive he means 
the exact opposite.

__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


RE: renewing certificate

2007-04-18 Thread Bart Heller
Just to let everyone know, this project is on hold for the forseeable future. 
We are looking at an alternative way to setup the reverse proxy and certificate 
that falls more into the realm of what we as Microsoft guys are familiar with. 
I.E. IIS based sites and certs. Thanks for the input though.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark H. Wood
Sent: Tuesday, April 17, 2007 9:20 AM
To: openssl-users@openssl.org
Subject: Re: renewing certificate

I went to www.microsoft.com and searched for IIS install certificate.  The 
first hit led me to:

  http://msdn2.microsoft.com/en-us/library/ms751408.aspx

with step-by-step instructions.  (Ignore the leading part about 'makecert', of 
course -- you already have a certificate.)

--
Mark H. Wood, Lead System Programmer   [EMAIL PROTECTED]
Typically when a software vendor says that a product is intuitive he means 
the exact opposite.

__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: renewing certificate

2007-04-17 Thread Mark H. Wood
I went to www.microsoft.com and searched for IIS install
certificate.  The first hit led me to:

  http://msdn2.microsoft.com/en-us/library/ms751408.aspx

with step-by-step instructions.  (Ignore the leading part about
'makecert', of course -- you already have a certificate.)

-- 
Mark H. Wood, Lead System Programmer   [EMAIL PROTECTED]
Typically when a software vendor says that a product is intuitive he
means the exact opposite.



pgpG5qCJimR4Z.pgp
Description: PGP signature


renewing certificate

2007-04-16 Thread Bart Heller
Hey everyone. I'm still not so into this so here I go again.

I am trying to rewenew an expeired certificate on a windows server 2003 
machine. None of the steps in the RenewCert.txt document seem to apply. I did 
not set this server up originally and I need lots of help trying to figure this 
thing out.

Here is the list of things I need to know:

How to revoke the existing certificate - If you browse to the URL this server 
hosts, the certificate date is still the expired one.
How to update the certificate on the server so the URL the outside world sees 
is up to date.

I have the CSR and private key saved in a separate folder from the original 
install so I hope that helps.

Thanks!!

And no obviously I'm not a webadmin, so bear with me please.


RE: renewing certificate

2007-04-16 Thread David Schwartz

 I am trying to rewenew an expeired certificate on a windows
 server 2003 machine. None of the steps in the RenewCert.txt
 document seem to apply. I did not set this server up originally
 and I need lots of help trying to figure this thing out.

Is your problem obtaining the renewed certificate or installing it on the
server? If the latter, why are you asking on an OpenSSL list? These are
questions about how to operate whatever web server software you are using.

DS


__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: renewing certificate

2007-04-16 Thread Bill Angus
You might try the customer service dept. of the supplier who is providing your 
cert. Most are very good and will be able to help you do only what you need -- 
without a large number of time consuming extra steps. 

Bill Angus, MA
  - Original Message - 
  From: Bart Heller 
  To: openssl-users@openssl.org 
  Sent: Monday, April 16, 2007 12:11 PM
  Subject: renewing certificate


  Hey everyone. I'm still not so into this so here I go again.

   

  I am trying to rewenew an expeired certificate on a windows server 2003 
machine. None of the steps in the RenewCert.txt document seem to apply. I did 
not set this server up originally and I need lots of help trying to figure this 
thing out. 

   

  Here is the list of things I need to know:

   

  How to revoke the existing certificate - If you browse to the URL this server 
hosts, the certificate date is still the expired one.

  How to update the certificate on the server so the URL the outside world sees 
is up to date. 

   

  I have the CSR and private key saved in a separate folder from the original 
install so I hope that helps.

   

  Thanks!!

   

  And no obviously I'm not a webadmin, so bear with me please.


RE: renewing certificate

2007-04-16 Thread Bart Heller
The problem is with installing it on the server. It is a windows 2003 server 
with II6, however the certificate isn't being handled by IIS. I have no real 
clue how this thing was set up so I'm grasping at straws. Gotta love clients 
that hire college kids to do work, then are stuck when the kid moves on and no 
one knows how he did what he did.



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Schwartz
Sent: Monday, April 16, 2007 4:52 PM
To: openssl-users@openssl.org
Subject: RE: renewing certificate


 I am trying to rewenew an expeired certificate on a windows
 server 2003 machine. None of the steps in the RenewCert.txt
 document seem to apply. I did not set this server up originally
 and I need lots of help trying to figure this thing out.

Is your problem obtaining the renewed certificate or installing it on the
server? If the latter, why are you asking on an OpenSSL list? These are
questions about how to operate whatever web server software you are using.

DS


__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


RE: renewing certificate

2007-04-16 Thread Bart Heller
I have the renewed cert, I just can't figure out how to get it on the server. 
If IIS was managing the certificate and the websites on this server I'd be 
fine, but that isn't the case. I'm grasping at straws trying to follow up 
undocumented work by a college kid for this client. Yay for me!



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Angus
Sent: Tuesday, April 17, 2007 3:54 AM
To: openssl-users@openssl.org
Subject: Re: renewing certificate

You might try the customer service dept. of the supplier who is providing your 
cert. Most are very good and will be able to help you do only what you need -- 
without a large number of time consuming extra steps.

Bill Angus, MA
- Original Message -
From: Bart Hellermailto:[EMAIL PROTECTED]
To: openssl-users@openssl.orgmailto:openssl-users@openssl.org
Sent: Monday, April 16, 2007 12:11 PM
Subject: renewing certificate

Hey everyone. I'm still not so into this so here I go again.

I am trying to rewenew an expeired certificate on a windows server 2003 
machine. None of the steps in the RenewCert.txt document seem to apply. I did 
not set this server up originally and I need lots of help trying to figure this 
thing out.

Here is the list of things I need to know:

How to revoke the existing certificate - If you browse to the URL this server 
hosts, the certificate date is still the expired one.
How to update the certificate on the server so the URL the outside world sees 
is up to date.

I have the CSR and private key saved in a separate folder from the original 
install so I hope that helps.

Thanks!!

And no obviously I'm not a webadmin, so bear with me please.


RE: renewing certificate

2007-04-16 Thread David Schwartz

 The problem is with installing it on the server. It is a windows
 2003 server with II6, however the certificate isn't being handled
 by IIS. I have no real clue how this thing was set up so I'm
 grasping at straws. Gotta love clients that hire college kids to
 do work, then are stuck when the kid moves on and no one knows
 how he did what he did.

You're almost certainly posting to the wrong list. The problem is, since you
don't know what piece of software you need to deal with, you don't know what
the right list would be.

I would suggest that you first recognize that your problem is that you don't
know what piece of software is managing the certificate or providing it to
the web server. So you should try to provide information that might help
someone to determine that.

For example:

1) What process owns port 445 on your machine?

2) What headers do you get in a secure connection and how do they differ
from the headers in an insecure connection?

3) Can you find your key/certificate in your filesystem anywhere? If so,
what path? Or is it in the system certificate store?

4) Are there any administration pages or the like that you know of that
relate to the secure web server at all? What are there names? What text is
on them?

DS


__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]