[cisco-voip] UCM and RSASSA-PSS Certificates

[Reto Gassmann]

Hello group

I tried to install CA signed certificates for tomcat and xmpp on our UCM
and IM&P Server.
I could upload the Root and the intermediate certificates to the servers.
Then I tried to upload the signed xmpp certificate an got the following
error: java.security.cert.CertPathBuilderExeption: No such signature
agorithm.
I also tried to upload the certificate chain with the same result.

Our Microsoft CA uses the RSASSA-PSS signature algorithm. I found the Bug
CSCuz38372 that describes an issue with this signature algorithm and CUCM
servers.
We cannot change the signing algorithm on the CA. So I have to solve it on
the UCM.

Has anyone seen this and found a solution?
Thanks Reto
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20161102/e1f9dd65/attachment.html>