Community discussions

MUM Europe 2020
 
siuslawbb
newbie
Topic Author
Posts: 33
Joined: Thu May 19, 2011 9:45 pm

ssl import for SSTP

Thu May 19, 2011 10:13 pm

trying to get sstp up and running and we're running into some issues getting the SSL imported.

Used certificate-request to generate CSR. Used PositiveSSL through Namecheap to get real SSL and used the "other" server option.

Certificates gets imported just fine, but the private key isn't getting imported. Checked, double-checked, rechecked, and even issued a new SSL to verify that the password is correct. Every attempt to import the key generates this:

/certificate> import
passphrase: *********
certificates-imported: 0
private-keys-imported: 0
files-imported: 0
decryption-failures: 1
keys-with-no-certificate: 0

Attempting to load the cert into the SSTP server throws this message: could not load private key (6)

Any thoughts on what could be going on?
 
siuslawbb
newbie
Topic Author
Posts: 33
Joined: Thu May 19, 2011 9:45 pm

Re: ssl import for SSTP

Fri Jun 03, 2011 6:38 pm

Anyone had an issue like this before?
 
wjc163
just joined
Posts: 10
Joined: Tue Oct 20, 2009 12:40 am

Re: ssl import for SSTP

Tue Jun 07, 2011 11:21 pm

Having the same issue right now, except I'm not getting any error message.

Here's what I posted on WISPA's MT list.....

I need someone's help.



I purchased an ssl certificate from registar.com. I have received the files
and have tried installing it to a RB433 board to be used as a hotspot with
User Manager.



I have tried installing to 2 different ways based on the documentation I
have found on the MT website and a Google search.

#1 - combined both files (certificate and private key) into notepad and
saved to new file. Imported using the console interface.

#2 - Imported each file individually using the console interface, (only
after removing it from the initial install.)



Both times it appears that the private key is not being imported with no
errors showing.



[admin at hotspot] > cert

[admin at hotspot] /certificate> import file-name=certificate.crt

passphrase:

certificates-imported: 1

private-keys-imported: 0

files-imported: 1

decryption-failures: 0

keys-with-no-certificate: 0



[admin at hotspot] /certificate> import file-name=Privatekey.key

passphrase:

certificates-imported: 0

private-keys-imported: 0

files-imported: 0

decryption-failures: 0

keys-with-no-certificate: 0



[admin at hotspot] /certificate> print

Flags: K - decrypted-private-key, Q - private-key, R - rsa, D - dsa

0 D name="cert1" subject=OU=Domain Control Validated,OU=Hosted by
Register.com

,

OU=PositiveSSL,CN=hotspot.firenet1.com

issuer=C=US,O=Register.com,CN=Register.com CA SSL Services (DV)

serial-number="xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

invalid-before=jun/07/2011 00:00:00 invalid-after=jun/06/2014 23:59:59


ca=yes

[admin at hotspot] /certificate>



Anyone have any idea what's going on?
 
wjc163
just joined
Posts: 10
Joined: Tue Oct 20, 2009 12:40 am

Re: ssl import for SSTP

Tue Jun 21, 2011 11:34 pm

just trying to keep this post open for someone to answer.
 
uldis
MikroTik Support
MikroTik Support
Posts: 3428
Joined: Mon May 31, 2004 2:55 pm

Re: ssl import for SSTP

Wed Jun 22, 2011 10:02 am

what RouterOS version you used?
Please contact the support@mikrotik.com and include the support output file which is made right after importing the private key.
 
Krusty
Frequent Visitor
Frequent Visitor
Posts: 71
Joined: Fri May 02, 2008 11:14 pm

Re: ssl import for SSTP

Mon Mar 05, 2012 8:50 pm

do we know any solution ? have same problem here (MT 5,14). Tryied to import PEM, crt, cer, key, nothing works... :/
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5971
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: ssl import for SSTP

Tue Mar 06, 2012 9:06 am

if key is in pkcs8 format it will not be imported. You need to convert it to text format. Or wait for v5.15 where we added support for pkcs8.
http://wiki.mikrotik.com/wiki/Manual:Cr ... rtificates
 
Grant
just joined
Posts: 3
Joined: Sat Oct 26, 2013 10:55 am

Re: ssl import for SSTP

Sat Oct 26, 2013 10:59 am

Hi!

Rb951Ui-2HnD ver. 6.5

certificate import file-name=ca.crt
passphrase:
action timed out - try again, if error continues contact MikroTik support and send a supout file (13)

Who is online

Users browsing this forum: No registered users and 104 guests