Unsolved

This post is more than 5 years old

1 Rookie

 • 

7 Posts

20891

August 27th, 2007 14:00

DRAC5 unable to upload server certificate

I'm unable to replace the Dell self-signed SSL certificate with a self-signed certificate of my own.
I'm probably missing something because the steps I've done sofar seem straightforward.
 
Has anyone else succesfully replaced the DRAC5 certificate with a self-signed certificate?
 
What i'v done sofar:
 
In the DRAC5 webinterface, Configuration SSL MainMenu
-Generate a New Certificate Signing Request (CSR)
 Fill in the necessary info (common name etc.)
 Save as D:\OpenSSL\csr.txt
 
Using OpenSSL 0.98
-Generate a private key
 openssl genrsa -out privkey.txt 1024 base64
-Generate a self-signed certificate
 openssl x509 -req -days 7300 -in csr.txt -signkey privkey.txt -out crt.txt
 
In the DRAC5 webinterface, Configuration SSL MainMenu
-Upload server certificate
 FilePath: D:\OpenSSL\crt.txt
 
Result: Attempted to upload an invalid certificate.
 
I also tried concatenating the certificate and the private key, resulting in a "pem" format:
-Copy the certificate + private key to server.pem
 copy crt.txt+privkey.txt crt.pem
 
In the Configuration SSL MainMenu
-Upload server certificate
 FilePath: D:\OpenSSL\crt.pem
 
Result: Attempted to upload an invalid certificate.
 
Thanks in advance.

68 Posts

September 9th, 2007 20:00

Thank you for posting. Everything you have done so far looks correct. You can double check your steps with the following link from the DRAC5 User's Guide. The DRAC5 requires X509, Base 64 encoded certificates only.
 
Maybe at this point, it would be a good idea to use another CA to generate the new certificate by processing the original request. Give that a shot and let us know what happens. Thank you.
 
-DRAC User's Guide

1 Rookie

 • 

7 Posts

September 11th, 2007 17:00

Thanks for confirming that X509 and Base64 is correct. I was starting to doubt these settings.
 
I've contacted another company to generate a certicate for me. If they succeed I will post back.
 
I would have preferred to use a self-signed certificate, but if that doesn't seem to work,... oh well....
 
 
No Events found!

Top