Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Import GoDaddy UCC Cert




On Mar 5, 2008, at 9:09 PM, Timothy Reaves wrote:

Hello all. I just purchased a GoDaddy UCC cert )five domain). I am trring to get it installed, but am not having any luck. On the server, in the Keychain.app, I've imported both their cert an my cert, and they show up fine, valid, all that. Now I want to get the ServerAdmin cert. It does not seem to red from Keychain, but it does write to it.

In Server Admin, my cert does nto show up. Fine, I follow the instructions from GoDaddy. I add a cert with the same CN as my cert. I then go to the 'Add Singed or Renewed...' in the Certificates page. I paste in the data. No error is logged. But the cert still shows as a self-signed cert, both in Server Admin and in Keychain. So the one I just added is in Keychain, next to the one I had imported. This is very confusing, and frustrating.

I've reboot, repeated the process, all to no avail. In Server Admin I've tried the Import Cert (which would seem the logical choice). I selected my cert in box one, the .key file I created when generating the csr for GoDaddy in box two, the GoDaddy intermediate cert in box three, and the passphrase for the .key in box four, but the import fails.

Has anyone been able to get this to work? I'd greatly appreciate some help.


Before trying to reimport, you need to remove all vestiges of your older versions from within Keychain Access INCLUDING the application password that server uses to decrypt your certificates key file.


I posted to the list about this recently in terms of actually using one of these.


The executive summary is that the built-in tools will work for the primary name on the cert, but in order to utilize the certs other built-in names, you have remove the password from the key file and the use "Custom Configuration" in the


<http://www.networkjack.info/blog/2007/11/30/ssl-cert-with-subject- alternate-name/>



Brian

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden
References: 
 >Import GoDaddy UCC Cert (From: Timothy Reaves <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.