用内部颁发的证书替换证书

Question

在 HP SMH (System Management Homepage)，我想用内部 CA 颁发的证书替换默认 PEM。

我有三张证书，一张是私钥，一张是证书另一个是 CA 证书。它适用于 openldap 和 stunnel 等应用程序。对于 hpsmh，我首先尝试转换为 pcks7

openssl crl2pkcs7 -outform PEM  -nocrl -certfile /etc/ssl/certs/hpux.crt  -out cert.pem
openssl crl2pkcs7 -outform PEM  -nocrl -certfile /etc/ssl/certs/hpux.key  -out file.pem

然后我复制到/opt/hpsmh/sslshare/cert.pem和/opt/hpsmh/sslshare/file.pem。但是在重新启动 SMH 时出现此错误：

The server certificate did not match the private key and has been regenerated.
The problematic certificate was renamed certmm.pem and is in the "..\hp\sslshare" subdirectory.

有什么建议吗？谢谢

Answer 1

我自己找到了解决办法，hp接受x509证书所以我做了

 cp /etc/ssl/private/hpux.key /opt/hpsmh/sslshare/file.pem
 cp /etc/ssl/certs/hpux.crt /opt/hpsmh/sslshare/file.pem

重新启动 hpsmh，工作正常

用内部颁发的证书替换证书

Replace certificate with internally issued certificate

ssl

openssl

hp-ux