Re: Import Server Certificate - No Request Key Found

Thanks. I was fearing that. I was hoping there was a workaround using openSsL tool to import it to *system since I generated the csr using it. Or the Java tool Keytool. I just don’t see much or any notes from an IBM i perspective.

> On Oct 6, 2022, at 08:07, Brad Stone <[email protected]> wrote:
> 
> You need a CSR for a new certificate.
> 
>> On Wed, Oct 5, 2022 at 3:57 PM Stephen Piland <
>> [email protected]> wrote:
>> 
>> Thanks for suggesting that.  I saw that article from a few years ago.
>> Unfortunately, this would be a new Cert and not an existing one that I can
>> select and then pick Renew.
>> 
>> -----Original Message-----
>> From: WEB400 <[email protected]> On Behalf Of Brad Stone
>> Sent: Wednesday, October 5, 2022 8:25 AM
>> To: Web Enabling the IBM i (AS/400 and iSeries) <[email protected]
>>> 
>> Subject: Re: [WEB400] Import Server Certificate - No Request Key Found
>> 
>> See if this helps:
>> 
>> 
>> https://www.ibm.com/support/pages/method-importing-renewed-verisign-certificate-without-generating-csr
>> 
>> On Tue, Oct 4, 2022 at 7:14 PM Stephen Piland <
>> [email protected]> wrote:
>> 
>>> I've imported the CA cert(s) in preparation of importing the new (not
>>> renewal) server cert in DCM, but I'm getting error...
>>> 
>>> No request key is found for the certificate. If you are trying to
>>> receive the signed certificate, you must be using the same certificate
>>> store that was used when the certificate was requested. If this is a
>>> CA certificate, you should use the function for importing a CA.
>>> 
>>> I realize that it is true that I do not have a matching CSR that was
>>> generated.  I used QSH and OpenSSL to generate the CSR (P10) because I
>>> was initially having trouble getting it created in DCM.  DCM was
>>> requiring State / Province for some unknown reason.
>>> 
>>> I have seen people allude that they figured out a work around, but
>>> never see the solution posted.  Can OpenSSL be used to import the
>>> server cert to the *SYSTEM Cert Store?  Can KEYTOOL (Java, I believe) be
>> used?
>>> 
>>> I'm a newbie at all of this SSL, so don't get offended at my incorrect
>>> thoughts and terminology.
>>> --
>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
>>> mailing list To post a message email: [email protected] To
>>> subscribe, unsubscribe, or change list options,
>>> visit: https://lists.midrange.com/mailman/listinfo/web400
>>> or email: [email protected] Before posting, please
>>> take a moment to review the archives at
>>> https://archive.midrange.com/web400.
>>> 
>>> 
>> --
>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>> list To post a message email: [email protected] To subscribe,
>> unsubscribe, or change list options,
>> visit: https://lists.midrange.com/mailman/listinfo/web400
>> or email: [email protected] Before posting, please take a
>> moment to review the archives at https://archive.midrange.com/web400.
>> 
>> --
>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>> list
>> To post a message email: [email protected]
>> To subscribe, unsubscribe, or change list options,
>> visit: https://lists.midrange.com/mailman/listinfo/web400
>> or email: [email protected]
>> Before posting, please take a moment to review the archives
>> at https://archive.midrange.com/web400.
>> 
>> 
> -- 
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
> 
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.