msgcert syntax
msg-serv 6.3-4.01 (built Aug 3 2007; 32bit)
I am attempting to request and install a new cert using msgcert on a 6.3 msg instance. I have used msgcert to generate self signed certs and understand
the basics of how it works.
I did not need to use msgcert the first time around on this instance as I had done so on a 6.2 instance and I was able to move the db files over
to the 6.3 instance for a still valid cert.
Now, however I am faced with figuring out the syntax of msgcert ( which I assume is the only mechanism for cert req as well as install on a 6.3 instance ?)
I am requesting the Cert with the following syntax:
(which seems to work fine, no errors)
./msgcert request-cert -W sslpassword.conf name mail.education.ucsb.edu org "University of California Santa Barbara" org-unit GGSE city "Santa Barbara" state California country US -F ascii -o /msg/config/test-cert.req
But contents of test-cert.req reads accordingly:
Certificate request generated by Messaging Server Instance:
Common Name: mail.education.ucsb.edu
Email: (not specified)
Phone: (not specified)
Organization: University of California Santa Barbara
State: California
Country: US
-----BEGIN NEW CERTIFICATE REQUEST-----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-----END NEW CERTIFICATE REQUEST-----
My concern is that it is lacking the Org Unit and there is no email nor phone specified ( perhaps these two are not necesary) Past experience has indicated that if you do not get the syntax of a cert req just right the signed cert will not be compatible.
Is there some clearer documentation on the use of msgcert? Am I missing something? I do not see much in the forum nor a wiki page on it's use.
-john