I’m not quite ready to give up on the GUI.
The Mac OS X Mail Service Administration for Version 10.4 or Later, page 97, (Certificate Manager in Server Admin) has instructions for converting a Self Signed Certificate to a Certificate Signed by a Certificate Authority.
Step 17 states Copy the characters [the signed Certificate from the email reply received from the Certificate Authority] from “==Begin CSR==” to “==End CSR==” into the text box.
I’m acting as my own Certificate Authority (using OpenSSL), and the Signed Certificates generated by OpenSSL (in PEM format) are wrapped by “—–BEGIN CERTIFICATE—–” and “—–END CERTIFICATE—–“. I can’t find any information about a format containing “==Begin CSR==” and “==End CSR==”, and therefore don’t have any way to generate a “signed” certificate in the format that the Certificate Manager in Server Admin is expecting.
The bad news is, if you paste in anything other that what the Certificate Manager expects, you get the rather unfriendly response Can no longer edit record. The selected certificate could not be retrieved. Going back to the list, and your original self signed Certificate is discarded.
Can anybody (perhaps somebody who has received a signed certificate in this format) provide any further details regarding what Apple is looking for here?
Recent Comments