Cisco Cisco MeetingTime Quick Setup Guide

Use the openssl command in the Application Server CLI to convert the file to a supported 

format. In the following example, an unsupported PKCS12 file is converted to a supported 
PEM-formatted file: 

[mpxadmin@application-server ~]$ openssl pkcs12 -in old-file.pfx -out new-file.pem 

-nodes

If the file contained both the certificate and the private key, then the converted file will contain both a 
PRIVATE KEY block and a CERTIFICATE block. Use a text editor to separate these into two files 
before uploading them to the Application Server and enabling SSL, following these requirements: 

Each file must contain only one block. 

Include the BEGIN and END lines of each block, for example: 

-----BEGIN RSA PRIVATE KEY-----

...

-----END RSA PRIVATE KEY-----

Do not include any text, including spaces or blank lines, before the BEGIN line and after the END 
line. A trailing line break after the END line is okay. Some files contain extraneous data before the 
BEGIN line and after the END line. Remove such data before uploading the file and enabling SSL 
on the Application Server. 

This topic lists error messages that may appear in the Administration Center.

Error Message   Unparseable certificate extensions: 2 [1]: ObjectId: 1.3.6.1.5.5.7.1.1 
Criticality=false Unparseable AuthorityInfoAccess extension due to 

java.io.IOException: invalid URI name:file:// 

\\SAMPLE.string.com\CertEnroll\SAMPLE.string.com 

Java.net.URL does not handle UNC paths well, "file://\\" is not a valid URI due to the 

inclusion of '\\' characters as defined by RFC 2396. 

Sign the certificate without the URL that includes the UNC path. 

Error Message   The uploaded certificate does not match any private key on disk. SSL 
cannot be enabled.

Make sure that you are uploading the correct certificate. If necessary, obtain a 

new certificate, private key, and password.

Error Message   A certificate was not found in the uploaded file.

There was an error parsing the certificate.

Make sure that you are uploading the correct file. If necessary, obtain a new 

certificate.

See 

If necessary, obtain a new certificate.