Краткое Руководство По Установке для Cisco Cisco Unified MeetingPlace Video Integration
Troubleshooting the Cisco Unified MeetingPlace Application Server
Error Messages for Application Server SSL
4
Solution
Use the openssl command in the Application Server CLI to convert the file to a supported
format. In the following example, an unsupported PKCS12 file is converted to a supported
PEM-formatted file:
PEM-formatted file:
[mpxadmin@application-server ~]$ openssl pkcs12 -in old-file.pfx -out new-file.pem
-nodes
If the file contained both the certificate and the private key, then the converted file will contain both a
PRIVATE KEY block and a CERTIFICATE block. Use a text editor to separate these into two files
before uploading them to the Application Server and enabling SSL, following these requirements:
PRIVATE KEY block and a CERTIFICATE block. Use a text editor to separate these into two files
before uploading them to the Application Server and enabling SSL, following these requirements:
•
Each file must contain only one block.
•
Include the BEGIN and END lines of each block, for example:
-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----
•
Do not include any text, including spaces or blank lines, before the BEGIN line and after the END
line. A trailing line break after the END line is okay. Some files contain extraneous data before the
BEGIN line and after the END line. Remove such data before uploading the file and enabling SSL
on the Application Server.
line. A trailing line break after the END line is okay. Some files contain extraneous data before the
BEGIN line and after the END line. Remove such data before uploading the file and enabling SSL
on the Application Server.
Error Messages for Application Server SSL
This topic lists error messages that may appear in the Administration Center.
Error Message Unparseable certificate extensions: 2 [1]: ObjectId: 1.3.6.1.5.5.7.1.1
Criticality=false Unparseable AuthorityInfoAccess extension due to
Criticality=false Unparseable AuthorityInfoAccess extension due to
java.io.IOException: invalid URI name:file://
\\SAMPLE.string.com\CertEnroll\SAMPLE.string.com
Explanation
Java.net.URL does not handle UNC paths well, "file://\\" is not a valid URI due to the
inclusion of '\\' characters as defined by RFC 2396.
Recommended Action
Sign the certificate without the URL that includes the UNC path.
Error Message The uploaded certificate does not match any private key on disk. SSL
cannot be enabled.
cannot be enabled.
Recommended Action
Make sure that you are uploading the correct certificate. If necessary, obtain a
new certificate, private key, and password.
Error Message A certificate was not found in the uploaded file.
Explanation
There was an error parsing the certificate.
Recommended Action
Make sure that you are uploading the correct file. If necessary, obtain a new
certificate.
•
See
•
If necessary, obtain a new certificate.