Re: Import Server Certificate - No Request Key Found

On Oct 6, 2022, at 08:07, Brad Stone <bvstone@xxxxxxxxx> wrote:

You need a CSR for a new certificate.

On Wed, Oct 5, 2022 at 3:57 PM Stephen Piland <
Stephen@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Thanks for suggesting that. I saw that article from a few years ago.
Unfortunately, this would be a new Cert and not an existing one that I can
select and then pick Renew.

-----Original Message-----
From: WEB400 <web400-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Brad Stone
Sent: Wednesday, October 5, 2022 8:25 AM
To: Web Enabling the IBM i (AS/400 and iSeries) <web400@xxxxxxxxxxxxxxxxxx

Subject: Re: [WEB400] Import Server Certificate - No Request Key Found

See if this helps:


https://www.ibm.com/support/pages/method-importing-renewed-verisign-certificate-without-generating-csr

On Tue, Oct 4, 2022 at 7:14 PM Stephen Piland <
Stephen@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

I've imported the CA cert(s) in preparation of importing the new (not
renewal) server cert in DCM, but I'm getting error...

No request key is found for the certificate. If you are trying to
receive the signed certificate, you must be using the same certificate
store that was used when the certificate was requested. If this is a
CA certificate, you should use the function for importing a CA.

I realize that it is true that I do not have a matching CSR that was
generated. I used QSH and OpenSSL to generate the CSR (P10) because I
was initially having trouble getting it created in DCM. DCM was
requiring State / Province for some unknown reason.

I have seen people allude that they figured out a work around, but
never see the solution posted. Can OpenSSL be used to import the
server cert to the *SYSTEM Cert Store? Can KEYTOOL (Java, I believe) be

used?

I'm a newbie at all of this SSL, so don't get offended at my incorrect
thoughts and terminology.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
mailing list To post a message email: WEB400@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx Before posting, please
take a moment to review the archives at
https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list To post a message email: WEB400@xxxxxxxxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx Before posting, please take a
moment to review the archives at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.