IMS 6.3 And Use of Certutil -Z (Doc ID 2123182.1)

Last updated on APRIL 11, 2016

Applies to:

Oracle Communications Messaging Server - Version 6.3 and later
Information in this document applies to any platform.

Goal

On : 6.3 version, Command Line Utilities

iMS 6.3 and certutil

We need to renew the certificate on Messaging Server 6.3

Renewing with an SHA1 vs SHA2 cert, using certutil to generate the CSR with the following command. This does work with "-Z SHA1" but it will not with SHA2.

It is imperative to move to stronger encryption, but is it possible tto use certutil or openssl to generate an SHA2 CSR, if the signing authority will not sign an SHA1 request anymore?

/msg/sbin> ./certutil -R -s "cn=aaa.yyyy.domain,ou=zzzz,o=a university,l=City name,st=California,c=US" -a -d /opt/SUNWmsgsr/config -Z SHA2 -g 2048 -n Server-Cert
certutil -Z: SHA2 is not a recognized type.
 

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms