Re: Import Server Certificate - No Request Key Found

You need a CSR for a new certificate.

On Wed, Oct 5, 2022 at 3:57 PM Stephen Piland <
Stephen-BBGlZfjSmaeS7RsuTa25Kyijg5o3+NC7mpATvIKMPHk@public.gmane.org> wrote:

> Thanks for suggesting that.  I saw that article from a few years ago.
> Unfortunately, this would be a new Cert and not an existing one that I can
> select and then pick Renew.
>
> -----Original Message-----
> From: WEB400 <[email protected]> On Behalf Of Brad Stone
> Sent: Wednesday, October 5, 2022 8:25 AM
> To: Web Enabling the IBM i (AS/400 and iSeries) <[email protected]
> >
> Subject: Re: [WEB400] Import Server Certificate - No Request Key Found
>
> See if this helps:
>
>
> https://www.ibm.com/support/pages/method-importing-renewed-verisign-certificate-without-generating-csr
>
> On Tue, Oct 4, 2022 at 7:14 PM Stephen Piland <
> Stephen-BBGlZfjSmaeS7RsuTa25Kyijg5o3+NC7mpATvIKMPHk@public.gmane.org> wrote:
>
> > I've imported the CA cert(s) in preparation of importing the new (not
> > renewal) server cert in DCM, but I'm getting error...
> >
> > No request key is found for the certificate. If you are trying to
> > receive the signed certificate, you must be using the same certificate
> > store that was used when the certificate was requested. If this is a
> > CA certificate, you should use the function for importing a CA.
> >
> > I realize that it is true that I do not have a matching CSR that was
> > generated.  I used QSH and OpenSSL to generate the CSR (P10) because I
> > was initially having trouble getting it created in DCM.  DCM was
> > requiring State / Province for some unknown reason.
> >
> > I have seen people allude that they figured out a work around, but
> > never see the solution posted.  Can OpenSSL be used to import the
> > server cert to the *SYSTEM Cert Store?  Can KEYTOOL (Java, I believe) be
> used?
> >
> > I'm a newbie at all of this SSL, so don't get offended at my incorrect
> > thoughts and terminology.
> > --
> > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> > mailing list To post a message email: [email protected] To
> > subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/web400
> > or email: [email protected] Before posting, please
> > take a moment to review the archives at
> > https://archive.midrange.com/web400.
> >
> >
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list To post a message email: [email protected] To subscribe,
> unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected] Before posting, please take a
> moment to review the archives at https://archive.midrange.com/web400.
>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.