<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
The bug (CSCuz38372) was in an email last week from another user.
<div class=""><br class="">
</div>
<div class="">This isn’t on the UCM roadmap (as of now) so start up a conversation with your account team so they can create a business case to get it done.</div>
<div class=""><br class="">
<div class="">-Ryan </div>
<br class="">
<div>
<div class="">On Nov 7, 2016, at 2:31 AM, Reto Gassmann <<a href="mailto:voip@mrga.ch" class="">voip@mrga.ch</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">Thank you all for your inputs.
<div class="">I opened a TAC case to get an offical statement from cisco.</div>
<div class=""><br class="">
</div>
Regards Reto<br class="">
<div class=""><br class="">
Am Sonntag, 6. November 2016 schrieb Joshua Warcop :<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<u class=""></u>
<div class="">
<div style="font-size:10pt;font-family:Verdana,Arial,Helvetica,sans-serif" class="">
<div class="">That signature algorithm simply isn't supported. It's new with Windows Server 2012 CA installations. You have no other choice but to reissue the CA certificates with a different algorithm or use a different root chain completely. All certificates
in the chain must be supported.</div>
<div class=""><br class="">
</div>
<div class="">There is a process to change the CA and my recommendation is to fix the CA. This is another case of Microsoft using custom stuff thinking their products only ever live in pure Microsoft environments. <br class="">
<br class="">
<div class=""></div>
</div>
<div class=""><font size="2" class=""><br class="">
<br class="">
</font></div>
<div class=""><font size="2" class="">---- On Wed, 02 Nov 2016 05:52:59 -0400 Reto Gassmann<<a href="javascript:_e(%7B%7D,'cvml','voip@mrga.ch');" target="_blank" class="">voip@mrga.ch</a>> wrote ----</font></div>
<div class=""><font size="2" class=""><br class="">
</font></div>
<blockquote class="">
<div class="">Hello group
<div class=""><br class="">
</div>
<div class="">I tried to install CA signed certificates for tomcat and xmpp on our UCM and IM&P Server.</div>
I could upload the Root and the intermediate certificates to the servers. Then I tried to upload the signed xmpp certificate an got the following error: java.security.cert.<wbr class="">CertPathBuilderExeption: No such signature agorithm.
<div class="">I also tried to upload the certificate chain with the same result.
<div class=""><br class="">
</div>
<div class="">Our Microsoft CA uses the RSASSA-PSS signature algorithm. I found the Bug CSCuz38372 that describes an issue with this signature algorithm and CUCM servers.</div>
</div>
<div class="">We cannot change the signing algorithm on the CA. So I have to solve it on the UCM.</div>
<div class=""><br class="">
</div>
<div class="">Has anyone seen this and found a solution?</div>
<div class="">Thanks Reto</div>
______________________________<wbr class="">_________________ <br class="">
cisco-voip mailing list <br class="">
<a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank" class="">cisco-voip@puck.nether.net</a>
<br class="">
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank" class="">https://puck.nether.net/<wbr class="">mailman/listinfo/cisco-voip</a>
<br class="">
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
_______________________________________________<br class="">
cisco-voip mailing list<br class="">
<a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
https://puck.nether.net/mailman/listinfo/cisco-voip<br class="">
</div>
</div>
<br class="">
</div>
</body>
</html>