Hello Guys,
I need help about a issue with SSL
[b]Issue:[/b]
If you put a blank space at CN, OU... for example:
CN=Gessi Lima
The Verisign returns the follow error to request a trial certificate:
[i]Error 950e - Invalid Common Name[/i]
The common name in the CSR contains invalid characters like '?', '*', ':', ' '.
[b]My Environment:[/b]
Sun Java System Application Server 9.1_01 (build b09d-fcs)
JDK 1.6U4
Windows 2003 R2 Enterprise Edition
[b]I used this paper:[/b]
http://java.sun.com/mailers/techtips/enterprise/2007/TechTips2_Nov07.html
[b]Please take a look at my steps:[/b]
C:\Sun\AppServer\domains\domain1\config>keytool -genkeypair -keyalg RSA -keystor
e keystore.jks -validity 360 -alias s1as
Enter keystore password:
Keystore password is too short - must be at least 6 characters
Enter keystore password:
Re-enter new password:
What is your first and last name?
[Unknown]: Gessi Lima
What is the name of your organizational unit?
[Unknown]: Dev Team
What is the name of your organization?
[Unknown]: Gessi Corp
What is the name of your City or Locality?
[Unknown]: Sao Paulo
What is the name of your State or Province?
[Unknown]: Sao Paulo
What is the two-letter country code for this unit?
[Unknown]: BR
Is CN=Gessi Lima, OU=Dev Team, O=Gessi Corp, L=Sao Paulo, ST=Sao Paulo, C=BR correct?
[no]: yes
Enter key password for <s1as>
(RETURN if same as keystore password):
C:\Sun\AppServer\domains\domain1\config>keytool -certreq -alias s1as -file veris
ign.txt -keystore keystore.jks -storepass googoo
C:\Sun\AppServer\domains\domain1\config>
The keytool has generated the follow CSR:
-----BEGIN NEW CERTIFICATE REQUEST-----
MIIBsjCCARsCAQAwcjELMAkGA1UEBhMCQlIxEjAQBgNVBAgTCVNhbyBQYXVsbzESMBAGA1UEBxMJ
U2FvIFBhdWxvMRMwEQYDVQQKEwpHZXNzaSBDb3JwMREwDwYDVQQLEwhEZXYgVGVhbTETMBEGA1UE
AxMKR2Vzc2kgTGltYTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxGXmNJ1Mwh1d9OAqFcbP
u0B1+3jMfgnwUpC6WeM4/A2xbDnmLSrBZQ+IWS/l2FGNtCatACkPMN35Y3jsKMsaFtrf4WTKQEqv
diaXwGQcsGy+RFjARsGNolWST8ggx7QiKpkUc3HHXNh7mbjkM2tOuzWb8B0xfVSRQLPPK606pJMC
AwEAAaAAMA0GCSqGSIb3DQEBBQUAA4GBAER2F4Cj9DF92U7qDwYSDzUGxK8RufFkS+GhfTecwxse
wTrkc84KT2/bcEk81eiUsJ5kHUo9+Lazhn1EflwErfs5G1O73+try7IH1G2tRRyRQ0Sh0KIQgEMM
E895Ok467H2Gae56+fvy2atub0yOBzeSZJ6HYf2VCXDg0dfRhMzg
-----END NEW CERTIFICATE REQUEST-----
Any help is welcome!
Thank you
[b]PS: If you try create a CSR without blank spaces it'll works fine![/b]
[Message sent by forum member 'gessi' (gessi)]
http://forums.java.net/jive/thread.jspa?messageID=257581