Errori di montaggio dei supporti
Utilizzare le informazioni in questo argomento per risolvere i problemi di montaggio dei supporti.
Durante il processo di montaggio potrebbero verificarsi degli errori se si utilizzano certificati di sicurezza generati da Microsoft IIS. In questo caso, sostituire il certificato di sicurezza con un nuovo certificato generato da openssl. In particolare, il file pfx appena generato viene caricato nel server Microsoft IIS.
Di seguito è riportato un esempio che mostra come viene generato il certificato di sicurezza tramite openssl nel sistema operativo Linux.
$ openssl
OpenSSL>
$ openssl genrsa 1024 > server.key
Generating RSA private key, 1024 bit long modulus
...........................................++++++
.......................................................++++++
e is 65537 (0x10001)
$ openssl req -new -key server.key > server.csr
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:BJ
Locality Name (eg, city) []:HD
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Lenovo
Organizational Unit Name (eg, section) []:Lenovo
Common Name (e.g. server FQDN or YOUR name) []:10.245.18.66
Email Address []:test@test.com
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:LNV
$ ls
server.csr server.key
$ openssl req -x509 -days 3650 -key server.key -in server.csr > server.crt
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:BJ
Locality Name (eg, city) []:BJ
Organization Name (eg, company) [Internet Widgits Pty Ltd]:LNV
Organizational Unit Name (eg, section) []:LNV
Common Name (e.g. server FQDN or YOUR name) []:10.245.18.66
Email Address []:test@test.com
$ ls
server.crt server.csr server.key
$ openssl pkcs12 -export -out server.pfx -inkey server.key -in server.crt
Enter Export Password:
Verifying - Enter Export Password:
$ ls
server.crt server.csr server.key server.pfx
Envoyer des commentaires