The requested public SSL certificate cannot be imported

The requested public SSL certificate cannot be imported

Applies to

All versions of Cryptshare Server

Symptom

The requested SSL certificate cannot be imported into the keystore with the following error:

  • English: Could not establish trust for the CA Reply.
  • German: Vertrauenskette für die CA Antwort konnte nicht erstellt werden.

9207982.png

Caus:

The information in the SSL certificate from the CA doesn't match the information in the sent CSR.

Solution

Export the private key from the keystore used for the creation of the CSR file and import it together with the requested SSL certificate into a new keystore.

1. open the existing keystore used for the generating of the CSR file

2. klick with the right mouse button on the entry in the keystore

3. open the menu entry 'Export --> Export Private Key'

9207984.png

4. save the private key in OpenSSL format to your local machine

9207985.png 9207986.png

5. create new Java-Keystore of type JKS

​

9207974.png 
9207973.png

6. import the available SSL certificate

9207972.png

7. select the certificate format, e.g. pkcs12 (.pfx) or OpenSSL (.crt, .cer, .pem)

9207989.png 9207991.png 9207992.png

8. import and check the certificate chain

​

9207970.png 
9207969.png
 9207968.png

9. save the keystore

9207967.png

10. use the default password 'CA0AZhuFM4NogQh', to save the Keystore

9207966.png

11. install the created keystore on the Cryptshare server Setting up an SSL Certificate

    • Related Articles

    • SSL certificates

      Applies to All versions of Cryptshare Server Purpose In this article, you will find an overview on how to set up a new SSL certificate, install your wildcard certificate, generate a CSR or resolve certificate related error messages. Solution ...

    • SSL Certificates: XCA Tool

      Applies to: All Cryptshare Server versions Purpose: This is an example how to check correlation between SSL certificate, private key and CSR file Solution: download and start XCA tool create new database import certificate, private key and ...

    • Installation of an existing SSL certificate (e.g. wildcard SSL certificate) -

      Applies to: All versions of Cryptshare Server Purpose: This article describes how to install an already existing SSL certificate (e.g. wildcard SSL certificate) to your Cryptshare Server Solution: 1. Create new Java-Keystore with KeyStore Explorer 2. ...

    • Start failed after SSL certificate installation

      Applies to: All versions of Cryptshare Server Symptom: Cryptshare start fails after new keystore is created or SSL certificate is installed to it. Cause: The most common reason is a wrong keystore format or a wrong password. Solution: Please check ...

    • Adding LDAP or SMTP SSL certificate to the list of trusted certificates on the Cryptshare server -

      Inhaltsverzeichnis 1 Applies to: 2 Symptom: 3 Cause: 4 Solution: 4.1 Method 1) Using the Windows GUI: 4.2 Method 2) Using the Command Line: Applies to: All versions of Cryptshare Server Symptom: The connection to LDAP cannot be established using ...