私钥缺失,导入来自内部CA的证书

huangapple go评论57阅读模式
英文:

Private key missing while importing certificate from internal CA

问题

证书在IIS中过期,我的任务是更新它。

我使用mmc创建了CSR,并使用IIS /create certificate request来向内部CA请求证书。他们给我发布了.cer文件,但是当我将其导入到mmc/Certificates/Personal/Certificates时,私钥丢失。

由于缺少私钥,我的IIS服务器无法接受它。当我导入证书时,它消失了。

我尝试使用certutil -repairstore my xxx来修复,但没有找到智能卡。

我甚至尝试使用openssl创建,但仍然没有私钥。

我已经用我的无限CSR搞疯了我的CA。

我到底做错了什么?为什么会丢失私钥,即使我在同一台服务器上进行所有操作?
是我的问题还是CA的问题?

英文:

certificate expired in IIS My task to renew it

I created CSR using mmc and using IIS /create certificate request for my internal CA
They released to me .cer file. but while I import it to mmc/Certificates/Personal/Certificates there is missing privite key.

And because of missing privite key my IIS server not accepting it. While I import cert dissapeares.

I tried to fix using certuitil -repairstore my xxx looking for some Smart Card not helped.

I even tried to create using openssl same issue no private key.

I already made crazy my CA with my unlimited CSR.

Where I'm doing wrong? Why there is missing private key even I do all operation on the same server
Issue from my side or CA?

私钥缺失,导入来自内部CA的证书

答案1

得分: 0

有趣,我的加拿大 CA 不正确地颁发了证书。缺少第三级,他们发送给我的是链式证书,而不是实际的证书。

我进行了比较。

英文:

Funny, My CA incorreclty issued certificate.
There was missing 3rd level, They was sending me chain cert, not actual cert.

I compared below

私钥缺失,导入来自内部CA的证书

huangapple
  • 本文由 发表于 2023年5月22日 16:17:25
  • 转载请务必保留本文链接:https://go.coder-hub.com/76304237.html
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定