Re: OAS 4.0.7, SSL and Verisign: Unable to load or decode cert

Hi,

Dave Dumaresq wrote:

> We are running OAS 4.0.7.1 on a Sun SPARC/Solaris 2.6 machine and have
> set up SSL successfully with CIBC and Verisign's (Canadian, eh!) 14 day
> test site ID. However, set up fails when we try to install their Secure
> Site ID or Global Site ID. The error OAS gives is "unable to load or
> decode certificate file(s) 'servername'"

We had the same problem with a certificate from our CA. After many investigation we discovered that OAS 4.7.7.1 supported only cerificate from Verisign.

> Oracle suggested we generate keys (server, and public) using 512 bits,
> instead of the previous 1024 bits and Verisign suggested we try their
> Secure Site ID, rather than their Global Site ID.

Sillies!
You can use 1024 or 512 bits key.
If you use 1024 bit key and you have software "Export version", 512 bit of the key go unencrypted.
After many investigation we discovered that OAS 4.7.7.1 supports only cerificate from Verisign.

> So I have generated another set of keys and a certificate request using
> 512 bits for another Secure Site ID but OAS is still not able to "load
> or decode" the certificate files.

Of course

> If anyone can shed some light, it would be appreciated!

Use OAS 4.0.8.1
It works with certificate from every C.A. (remember that from previous versions change primary key file format, so you have to regenerate it (with the new genreq utility), or to generate a new request.

P.S. If you work also with Do not use OAS 4.0.8.0 because do no support report server.

Good luck
Enrico Venuto

--
+------------------------------------------------------------------------+
| Enrico Venuto                 CEntro Servizi Informatici e Telematici  |
 +--------------------------------------+---------------------------------+
| Politecnico di Torino                |   tel. +39-011-5646116          |
| Servizio Studenti                    |   fax  +39-011-5646299          |
| Corso Duca degli Abruzzi, 24         |   mailto:venuto_at_polito.it       |
| 10129 Torino                         |   callto:sds39.polito.it        |
| ITALY                                |   http://www.polito.it/~venuto  |
 +--------------------------------------+---------------------------------+
|                            Chi la dura la vince                        |
+------------------------------------------------------------------------+


--