Go Back   FlashFXP Forums > > > >
SSL Installation Problem :( SSL Installation Problem :(
Tickets Search Today's Posts Mark Forums Read

ioFTPD General New releases, comments, questions regarding the latest version of ioFTPD.

Reply
 
Thread Tools Rate Thread Display Modes
Old 09-29-2004, 03:51 PM   #1
SeVeN_2
Junior Member
 
Join Date: May 2004
Posts: 8
Default SSL Installation Problem :(
Hi!

I try install SSL for my ioFTPD (beta5-8-5r) ... but ... when i execute bat a file ...

200-Error: Can't create the key of the subject ('SSL')
200-Failed


First, make sure you have those two variables in your etc\ioftpd.env:

SYSTEMDRIVE=%[environment(SYSTEMDRIVE)]
SYSTEMROOT=%[environment(SYSTEMROOT)]

[Ok]

Restart ioFTPD if you had to change your ioftpd.env.

[Ok]

Disable all SSL functions (simply commenting the Certificate_Name lines would do).

;Certificate_Name = 192.168.1.10

[Ok]

Place the makecert.exe & certmgr.exe in a directory that you can access from your FTP. Both executables can be downloaded directly from Microsoft (choose the x86 link).

put in ... c:\ioftpd\system ...

[Ok]

- Create a .bat file in the same directory, which would contain:
makecert.exe -r -n "CN=YOUR_CERT_NAME_HERE" -b 01/01/2004 -e 01/01/2006 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr CurrentUser -a sha1 -sk YOUR_CERT_NAME_HERE -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12

YOUR_CERT_NAME_HERE = SSL

[Ok]

Login your FTP and execute your .bat file through a SITE EXEC command:
SITE EXEC your.bat

200-Error: Can't create the key of the subject ('SSL')
200-Failed

[FAiL] ...


Thx for any idea ...
SeVeN_2 is offline   Reply With Quote
Old 09-29-2004, 04:40 PM   #2
neoxed
Too much time...
FlashFXP Beta Tester
ioFTPD Scripter
 
Join Date: May 2003
Posts: 1,326
Default
I'm assuming you followed the knowledge base guide? http://www.ioftpd.com/kb/view.php?kbid=76

Which Windows version are you using? It's not Windows NT4 workstation by chance is it?
neoxed is offline   Reply With Quote
Old 09-29-2004, 04:43 PM   #3
SeVeN_2
Junior Member
 
Join Date: May 2004
Posts: 8
Default
Yes ... i follow the knowledge base guide ...

WIN-XP with SP1 ...
SeVeN_2 is offline   Reply With Quote
Old 09-29-2004, 05:55 PM   #4
Mouton
Posse Member
Ultimate Scripter
ioFTPD Administrator
 
Join Date: Dec 2002
Posts: 1,956
Default
YOUR_CERT_NAME_HERE = SSL

Show the exact line u used.
I tried with
makecert.exe -r -n "CN=SSL" -b 01/01/2004 -e 01/01/2006 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr CurrentUser -a sha1 -sk SSL -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12
and it worked just fine.
Mouton is offline   Reply With Quote
Old 09-29-2004, 05:57 PM   #5
SeVeN_2
Junior Member
 
Join Date: May 2004
Posts: 8
Default
edit
SeVeN_2 is offline   Reply With Quote
Old 09-29-2004, 06:06 PM   #6
Mouton
Posse Member
Ultimate Scripter
ioFTPD Administrator
 
Join Date: Dec 2002
Posts: 1,956
Default
read again
Mouton is offline   Reply With Quote
Old 09-29-2004, 06:47 PM   #7
SeVeN_2
Junior Member
 
Join Date: May 2004
Posts: 8
Default
By steps...
- I have decompressed script that creates the certificate.
- I have executed the file bat, and have introduced the name of the certificate. A file has generated ioftpd.cer.
- I have moved executables files and ioftpd.cer to the system directory to ioftpd, ande here i have executed bat file. with the error.
SeVeN_2 is offline   Reply With Quote
Old 09-29-2004, 07:13 PM   #8
neoxed
Too much time...
FlashFXP Beta Tester
ioFTPD Scripter
 
Join Date: May 2003
Posts: 1,326
Default
It does not matter where the certificate or the executables are. You must import the certificate (if you have not done so already). The makecert.exe parameters provided in that knowledge base article will automatically import the certificate for you.
neoxed is offline   Reply With Quote
Old 09-30-2004, 11:03 AM   #9
Mouton
Posse Member
Ultimate Scripter
ioFTPD Administrator
 
Join Date: Dec 2002
Posts: 1,956
Default
thescript your talking about is something else completely.
Not at all related to anything mentionned in the knowledge base.

Either u follow what the kb says, or u follow the instructions in the script, but trying both together is asking for trouble.
Mouton is offline   Reply With Quote
Old 01-30-2005, 06:45 AM   #10
Bratell
Member
FlashFXP Registered User
 
Join Date: Feb 2003
Posts: 64
Default
I've tried to install the SSL certificate using the http://www.ioftpd.com/kb/view.php?kbid=76 but I'm getting the same error as SeVeN did.

I've put this temp line in ioftpd.ini
Quote:
myssl = EXEC mybat.bat
to execute the makecert bat-file. This is the outcome:
Quote:
[R] site myssl
[R] 200-
[R] 200-C:\ioFTPD\system>makecert.exe -r -n "CN=iGELKOTT" -b 01/01/2004 -e 01/01/2006 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr CurrentUser -a sha1 -sk iGELKOTT -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12
[R] 200-Error: Can't create the key of the subject ('iGELKOTT')
[R] 200-Failed [R] 200 Command successful.
If I run the bat-file outside ioFTPD the certificate is installed without problem which tends to indicate that the problem is somewhere in the "ioftpd-section".

I have the
Quote:
SYSTEMDRIVE=%[environment(SYSTEMDRIVE)]
SYSTEMROOT=%[environment(SYSTEMROOT)]
lines in my ioftpd.env and I restarted ioftpd. I've also tried different versions of the makecert.exe (beginning with the on linked in the kb).

Does anyone have any suggestions? I can't come to think of anything at the moment.
Bratell is offline   Reply With Quote
Old 01-30-2005, 08:04 AM   #11
Bratell
Member
FlashFXP Registered User
 
Join Date: Feb 2003
Posts: 64
Default
Well, I made it the easy way

http://www.ioftpd.com/scripts/script.php?id=95

Still doesn't know why it didn't work the kb-way though.
Bratell is offline   Reply With Quote
Old 01-31-2005, 02:51 AM   #12
SeVeN_2
Junior Member
 
Join Date: May 2004
Posts: 8
Default
i fixed weeks ago ... problem in the wonderful windows.

:P
SeVeN_2 is offline   Reply With Quote
Old 01-31-2005, 08:34 AM   #13
Bratell
Member
FlashFXP Registered User
 
Join Date: Feb 2003
Posts: 64
Default
Quote:
Originally posted by SeVeN
problem in the wonderful windows.
Impossible.
Bratell is offline   Reply With Quote
Reply

Tags
create, file, ftp, ssl, [ok]

« Previous Thread | Next Thread »
Thread Tools
Display Modes Rate This Thread
Linear Mode Linear Mode
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 11:10 AM.
Archive - Privacy Statement - Top
Parts of this site powered by vBulletin Mods & Addons from DragonByte Technologies Ltd. (Details)