[cisco-voip] 10.5.1 UCCX Certificate for Finesse

[Gary Parker]

> On 5 Feb 2015, at 16:37, Jose Colon II <jcolon424 at gmail.com> wrote:
> 
> I am trying to generate certificate request from 10.5.1 UCCX box and the cert it generates is not working with verasign. It tells me "The State Name in the CSR cannot be abbreviated"
> 
> Anyone have any suggestions?

Hi Jose, have a look at your CSR using:

openssl req -text -noout -verify -in CSR.csr

where CSR.csr is your csr file.

Mine, for example, reads:

        Subject: C=GB, ST=Leicestershire, L=Loughborough, O=Loughborough University, OU=ITS, CN=tainter.lboro.ac.uk/serialNumber=xxxxxxxxxxxxxxxxxxxxxxxxx

On the “Subject:” line is the entry for ST= an abbreviated version of your State name? If so I’d imagine you’ll have to login on the command line for the server and use “set web-security” to change the State to a proper value.

If I had ST=Leics it would also likely fail.

Be aware that this *may* make you have to relicense the server (I’m not sure if changing state is enough to trigger this).


---
/-Gary Parker----------------------------------f--\
|     Unified Communications Service Manager      |
n       Loughborough University IT Services       |
|     Tel: +441509635635  Mob: +447989172258      o
|     http://delphium.lboro.ac.uk/pubkey.txt      |
\r----------------------------------------------d-/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20150205/7204f5a0/attachment.sig>