Re: Import Server Certificate - No Request Key Found

[Stephen Piland <Stephen@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

Thanks for suggesting that.  I saw that article from a few years ago.  Unfortunately, this would be a new Cert and not an existing one that I can select and then pick Renew.

-----Original Message-----
From: WEB400 <web400-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Brad Stone
Sent: Wednesday, October 5, 2022 8:25 AM
To: Web Enabling the IBM i (AS/400 and iSeries) <web400@xxxxxxxxxxxxxxxxxx>
Subject: Re: [WEB400] Import Server Certificate - No Request Key Found

See if this helps:

https://www.ibm.com/support/pages/method-importing-renewed-verisign-certificate-without-generating-csr

On Tue, Oct 4, 2022 at 7:14 PM Stephen Piland < Stephen@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

> I've imported the CA cert(s) in preparation of importing the new (not
> renewal) server cert in DCM, but I'm getting error...
>
> No request key is found for the certificate. If you are trying to 
> receive the signed certificate, you must be using the same certificate 
> store that was used when the certificate was requested. If this is a 
> CA certificate, you should use the function for importing a CA.
>
> I realize that it is true that I do not have a matching CSR that was 
> generated.  I used QSH and OpenSSL to generate the CSR (P10) because I 
> was initially having trouble getting it created in DCM.  DCM was 
> requiring State / Province for some unknown reason.
>
> I have seen people allude that they figured out a work around, but 
> never see the solution posted.  Can OpenSSL be used to import the 
> server cert to the *SYSTEM Cert Store?  Can KEYTOOL (Java, I believe) be used?
>
> I'm a newbie at all of this SSL, so don't get offended at my incorrect 
> thoughts and terminology.
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) 
> mailing list To post a message email: WEB400@xxxxxxxxxxxxxxxxxx To 
> subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxxxxxxxx Before posting, please 
> take a moment to review the archives at 
> https://archive.midrange.com/web400.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list To post a message email: WEB400@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx Before posting, please take a moment to review the archives at https://archive.midrange.com/web400.