How to generate CSR on iPlanet 6.0/Solaris 8?
 

We are trying to generate a Certificate Signing Request to send to Verisign/Thawte so that we can get an SSL certificate for a new webserver. We have tried using the administrative tools, and certutil to no avail. We have also called the iPlanet support desk, which helped little. Has anyone gotten this working? Can you email me, reply to this forum, send me a link, etc with help? We've scoured the internet and could not find anything!!! AARRGH!

The error is a complaint about the "VICE" submission. Trying the generic CSR generator gives us a dead page. We upgraded our JVM to 1.3.1_06, then on direction from Sun reverted back to 1.2.2_10, which did not help. We also added the https/admin/lib to our LD_LIBRARY_PATH env variable as per Sun (for running certutil), which allowed us to run certutil (ZERO DOCUMENTATION mind you), which did not help. Again the VICE protocol failed: SEC_ERROR_LIBRARY_FAILURE.

Thanks!

Ben Carlson

You poor bastard :-) At least you got that far...

Personally after much frustration I used openssl to build my certificates, then spent _DAYS_ trying to locate certutil (eventually found it on the mozilla site... of all places) so I could bundle it up.

Quite frankly we will most likely revert to using either openldap or NDS, iPlanet is a dog and Sun's documentation has gone to hell in a hand basket (one of these days I'm sure they'll publish the CORRECT schemas... WITHOUT typos)