From: "Mark A. Parsons" <iron_horse@no_spamola.compuserve.com>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
Newsgroups: sybase.public.ase.administration
Subject: Re: SSL addcert failed
References: <06a63296-159e-438b-afd0-46d393cb52c0@p23g2000prp.googlegroups.com>
In-Reply-To: <06a63296-159e-438b-afd0-46d393cb52c0@p23g2000prp.googlegroups.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: vip152.sybase.com
X-Original-NNTP-Posting-Host: vip152.sybase.com
Message-ID: <49804891@forums-1-dub>
Date: 28 Jan 2009 03:59:13 -0800
X-Trace: forums-1-dub 1233143953 10.22.241.152 (28 Jan 2009 03:59:13 -0800)
X-Original-Trace: 28 Jan 2009 03:59:13 -0800, vip152.sybase.com
Lines: 36
Path: g2news1.google.com!news1.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!novia!newsfeed.yul.equant.net!news-peer1.sprintlink.net!news-sj-1.sprintlink.net!forums-master!forums-1-dub!not-for-mail
X-Original-Bytes: 2363

While I don't recall the error message, I do know you'll have a problem installing and/or using a certificate if it has 
the wrong CN.

Sybase requires that the dataserver certificate (server_req.txt in this case) is setup with CN=<dataserver_name>, where 
<dataserver_name> is a) the same as the stanza header in sql.ini and b) the same as @@servername.  ("Duh, Mark!" ?)


Daniel Montero wrote:
> Hi.
> I am trying to enable SSL for my new ASE 15.0.2.  I've followed the
> steps stated in the admin guide chapter 19, or at least I think so,
> and I am getting an error when trying to do the sp_ssladmin addcert:
> 
> 
> Command 'addcert' failed to add certificate path c:\sybase
> \ASE-15_0\certificates\myserver.crt, system error: SSLDataNotFound.
> 
> I've googled but found nothing that enlightens me, neither I could
> find that message in the docs.
> 
> What I have done so far:
> 
> 
> REM CA & server certificate
> certreq -F ca_info.txt -R ca_req.txt -K ca_pkey.txt -P donttell
> certreq -F server_info.txt -R server_req.txt -K server_pkey.txt -P
> donttell
> 
> REM Self sign ca_req & sign server_req
> certauth -r -C ca_req.txt -Q ca_req.txt -K ca_pkey.txt -P donttell -T
> 365 -O trusted.txt
> certauth -C trusted.txt -Q server_req.txt -K ca_pkey.txt -P donttell -
> T 365 -O server.crt
> rename server.crt myserver.crt
> 
> Any help will be appreciated.