Cisco Cisco Unified MeetingPlace Audio Server Quick Setup Guide

Page of 766
 
Troubleshooting the Cisco Unified MeetingPlace Application Server
How to Solve Problems with the Application Server SSL
3
 
SSL Stops Working
Problem   
SSL stops working.
Possible Cause   
You accidentally clicked 
, which created a new private key that no 
longer matches the previously uploaded certificate. 
Solution   
If you backed up the SSL configuration, restore it. See 
 in 
th
 module. If you did not back 
up the SSL configuration, then obtain and upload a new certificate. 
Possible Cause   
You performed a fresh installation of the Cisco Unified MeetingPlace application. 
The installation process deletes any private key files and public certificates on the system. 
Solution   
If you backed up the SSL configuration, restore it. See 
 If 
you did not back up the SSL configuration, then obtain and upload a new certificate. 
Possible Cause   
The Application Server hostname was changed. The CSR and resulting certificate 
use the Application Server hostname that you entered for Ethernet Port 1 (device eth0) during the 
operating system installation.
Solution   
Obtain and upload a new certificate.
No SSL Connection
Problem   
SSL connection cannot be established between Cisco Unified MeetingPlace and 
Microsoft Outlook, and an exception such as the following appears in the logs:
java.lang.Securityeption: Unsupported keysize or algorithm parameters
Possible Cause   
The problem occurs when the certificate contains a key longer than 1024 bits. The 
cryptography strength limitations placed by the default policy files included with Java Runtime 
Environment (JRE) give the highest strength cryptography algorithms and key lengths which are 
allowed for import to all countries. 
Solution   
If your country does not place restrictions on the import of cryptography, then you can 
download the unlimited strength policy files:
1.
Go to 
2.
Download the “Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6.” 
3.
Follow the instructions in the README.txt file in the downloaded package. The JRE installation 
used by Cisco Unified MeetingPlace is in /opt/cisco/meetingplace/jre/.
Certificate or Private Key is in the Wrong Format 
Problem   
The certificate or private key is in the wrong format. 
Note
The Application Server supports only the following formats: 
  •
Private keys: PKCS #1, PKCS #8 (PEM or DER encoding), Java keystore 
  •
Certificates: X.509 (PEM or DER encoding), Java keystore