dbTalk Databases Forums  

Problem with wallet manager - wrong signature algorithm

comp.databases.oracle.tools comp.databases.oracle.tools


Discuss Problem with wallet manager - wrong signature algorithm in the comp.databases.oracle.tools forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Andreas Werner
 
Posts: n/a

Default Problem with wallet manager - wrong signature algorithm - 07-02-2010 , 10:50 AM






Hi,

I´ve a problem with the certification request. My certificate authority
rejected it with comment "MD5 Signature Algorithm Detected,Please change
the signature algorithm to SHA1 or better, create a new CSR and try it
again!"

I can´t find any solution to change this in the oracle wallet manager.

Any ideas?
Thanks!

Andy

Reply With Quote
  #2  
Old   
Vladimir M. Zakharychev
 
Posts: n/a

Default Re: Problem with wallet manager - wrong signature algorithm - 07-08-2010 , 01:14 AM






On Jul 2, 6:50*pm, Andreas Werner <i... (AT) awit (DOT) biz> wrote:
Quote:
Hi,

I´ve a problem with the certification request. My certificate authority
rejected it with comment "MD5 Signature Algorithm Detected,Please change
the signature algorithm to SHA1 or better, create a new CSR and try it
again!"

I can´t find any solution to change this in the oracle wallet manager.

Any ideas?
Thanks!

Andy
You can try to use OpenSSL to generate the CSR. To do this, you first
need to generate a CSR in OWM (this will also create a keypair.) You
then use

openssl pkcs12 -in your_wallet.p12 -nodes -out your_wallet.pem

to break the wallet into PEM-encoded components. -nodes instructs
OpenSSL to skip encryption of the private key. Next you extract the
private key from your_wallet.pem (copy and paste it into a separate
file) and use

openssl req -new -key your_privkey.key -out somesite.csr

OpenSSL will prompt you for request attributes, just enter the same
data you entered when creating CSR in OWM. OpenSSL uses SHA-1 in CSRs
by default, so this CSR should be accepted by your CA.

Finally, import the signed certificate into the wallet.

I believe this should do the trick. Please post back whether you will
succeed or not with this approach.

Hth,
Vladimir M. Zakharychev

Reply With Quote
  #3  
Old   
Andreas Werner
 
Posts: n/a

Default Re: Problem with wallet manager - wrong signature algorithm - 07-13-2010 , 01:06 PM



Am 08.07.2010 07:14, schrieb Vladimir M. Zakharychev:

Quote:
You can try to use OpenSSL to generate the CSR.

Vladimir, thank you very much!
It works fine!

Andy

Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.