Skip to main content
Solved

SSL Certificate are no longer issued for Code Signing Since June 2021.

  • November 18, 2021
  • 4 replies
  • 465 views

Forum|alt.badge.img+2

IFS 10APPS UPD 7.  We are trying to install Public SSL certificate which now days only issued for 

Server Authentication (1.3.6.1.5.5.7.3.1)
Client Authentication (1.3.6.1.5.5.7.3.2)
 

We can not use it for Client Signing. What are our option and how do we sign client and same time configure server with public ssl.

 

Thanks,

Naren

Best answer by Ruchira

Hi @gehlot,

 Yes certificate should be capable of signing the code

This topic has been closed for replies.

4 replies

Forum|alt.badge.img+13
  • Hero (Partner)
  • November 18, 2021

Hi

Are you getting any errors when reconfiguring the MWS with selecting the option to sign the client from the same SSL certificate?

 

Normally EKU only shows Authentication extensions but KU shows whether you have the ability to sign the code with below value, or if KU is absence CERT should valid for all purposes

 

KU => Digital Signature, Key Encipherment (a0)
 


Forum|alt.badge.img+2
  • Author
  • Do Gooder (Customer)
  • November 18, 2021

Hello Ruchira,

 

Thank you for your reply.

In my wildcard public SSL, We do have following entry

KU => Digital Signature, Key Encipherment (a0).

 

Should we be ok to sign client or it the issue.

 

Thanks,

Naren


Forum|alt.badge.img+13
  • Hero (Partner)
  • Answer
  • November 19, 2021

Hi @gehlot,

 Yes certificate should be capable of signing the code


Forum|alt.badge.img+2
  • Author
  • Do Gooder (Customer)
  • November 22, 2021

Hello @Ruchira 

 

Thank you for your help. we were able to sign using   SSL certificate as suggested steps by you.

 

Thanks,

Naren