Solved

SSL Certificate are no longer issued for Code Signing Since June 2021.

  • 18 November 2021
  • 4 replies
  • 330 views

Userlevel 1
Badge +2

IFS 10APPS UPD 7.  We are trying to install Public SSL certificate which now days only issued for 

Server Authentication (1.3.6.1.5.5.7.3.1)
Client Authentication (1.3.6.1.5.5.7.3.2)
 

We can not use it for Client Signing. What are our option and how do we sign client and same time configure server with public ssl.

 

Thanks,

Naren

icon

Best answer by Ruchira 19 November 2021, 03:34

View original

This topic has been closed for comments

4 replies

Userlevel 5
Badge +12

Hi

Are you getting any errors when reconfiguring the MWS with selecting the option to sign the client from the same SSL certificate?

 

Normally EKU only shows Authentication extensions but KU shows whether you have the ability to sign the code with below value, or if KU is absence CERT should valid for all purposes

 

KU => Digital Signature, Key Encipherment (a0)
 

Userlevel 1
Badge +2

Hello Ruchira,

 

Thank you for your reply.

In my wildcard public SSL, We do have following entry

KU => Digital Signature, Key Encipherment (a0).

 

Should we be ok to sign client or it the issue.

 

Thanks,

Naren

Userlevel 5
Badge +12

Hi @gehlot,

 Yes certificate should be capable of signing the code

Userlevel 1
Badge +2

Hello @Ruchira 

 

Thank you for your help. we were able to sign using   SSL certificate as suggested steps by you.

 

Thanks,

Naren