[cisco-voip] UCM and RSASSA-PSS Certificates

[voip at mrga.ch]

Hello group

 

I tried to install CA signed certificates for tomcat and xmpp on our UCM and IM&P Server.

I could upload the Root and the intermediate certificates to the servers. Then I tried to upload the signed xmpp certificate an got the following error: java.security.cert.CertPathBuilderExeption: No such signature agorithm. 

I also tried to upload the certificate chain with the same result.

 

Our Microsoft CA uses the RSASSA-PSS signature algorithm. I found the Bug CSCuz38372 that describes an issue with this signature algorithm and CUCM servers.

We cannot change the signing algorithm on the CA. So I have to solve it on the UCM.

 

Has anyone seen this and found a solution?

Thanks Reto

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20161103/d0c8c1d0/attachment.html>