Re: Signing an OpenSSL CSR with Microsoft Certificate Authority

From: Dave Morrow (davemorrow_at_hotmail.com)
Date: 07/25/05

  • Next message: Andy Dent: "Problems setting up automatic certificate requests" 
    Date: Mon, 25 Jul 2005 09:40:54 -0400

    Thanks for the reply.

    I'll have to look into how to add the appropriate information to the CSR
    with OpenSSL. I've already tried using the web interface with the same
    results (no template).

    "S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
    news:OPkWDiPkFHA.3656@TK2MSFTNGP09.phx.gbl...
    > Better use Web interface or certreq.exe to request the cert. I'm most
    > certain that the enterprise CA Web interface allows to select template for
    > a
    > request.
    >
    > If you'd like to have the whole lot done by OpenSSL - you can do that too.
    > As usually, documentation is largely missing and some assembly required
    > but
    > here's the deal:
    >
    > * You can add the template name to the request - it is an attribute with
    > OID
    > 1.3.6.1.4.1.311.20.2
    > * Openssl allows to add optional attributes in the request configuration
    > file. See req man page for details.
    >
    > --
    > Svyatoslav Pidgorny, MS MVP - Security, MCSE
    > -= F1 is the key =-
    >
    >
    > "Dave Morrow" <davemorrow@hotmail.com> wrote in message
    > news:u7NEkyFkFHA.1416@TK2MSFTNGP09.phx.gbl...
    >> I am attempting to sign an OpenSSL generated CSR with Microsoft
    >> Certification Authority.
    >>
    >> I generated the CSR using the instructions the instructions on the Apache
    >> website and successfully got the CSR. When I attempt to sign the CSR
    >> using
    >> Microsoft's Certificate Authority, I get the error "The request contains
    > no
    >> certificate template information."
    >>
    >> Does anyone know how to do this?
    >>
    >>
    >
    >

  • Next message: Andy Dent: "Problems setting up automatic certificate requests"

    Relevant Pages

    • E2k7 Zertifikate (CSR mit openSSL signieren)
      ... Auf diesem habe ich eine RootCA und eine ServerCA etabliert. ... Mit New-ExchangeCertificate erzeuge ich jetzt ein Zertifikatsrequest (CSR) und stelle diesen der openSSL Server CA zum signieren bereit. ... certificate = $dir/ServerCA.cert.pem ...
      (microsoft.public.de.exchange)
    • Re: Signing an OpenSSL CSR with Microsoft Certificate Authority
      ... Better use Web interface or certreq.exe to request the cert. ... * You can add the template name to the request - it is an attribute with OID ... > I generated the CSR using the instructions the instructions on the Apache ...
      (microsoft.public.windows.server.security)
    • Generating an SSL Certificate Signing Request (CSR) on Mac OS X Server 10.6
      ... I can generate a CSR (Certificate Signing Request) really easily via ... Server Admin, but I do not know what options it is using to generate the ... if there are Mac OS differences in the openssl commands. ...
      (uk.comp.sys.mac)
    • Trouble importing server certificate
      ... while requesting a renewal for an existing certificate via Verisign's ... web interface I trapped into the feature "Old CSR". ... (running IIS 5.0 with no valid request matching the CSR of course!). ...
      (microsoft.public.inetserver.iis.security)