C2NET Stronghold Support

This section provides the answers to the most commonly asked questions about C2Net Stronghold.

  1. How do I install my certificate in C2Net Stronghold
  2. Why does getca display an error saying that the certificate does not match the key?
  3. Why does Internet Explorer display "An error occurred in the secure channel support"?
  4. Why do Navigator users see a "The server has encountered bad data from the client" message?
  5. Why do Navigator 3.x users see a "Certificate Authority Expired" message when they connect to my server?

If you have a question that is not answered here please contact Entrust support.

  1. How do I install my certificate in C2Net Stronghold (top)

    Instructions for installing your certificate may be found here.

  2. Why does getca display an error saying that the certificate does not match the key? (top)

    Your server is using a key that does not correspond to your Entrust SSL Certificate.

    To find out if a particular private key is associated with a certificate you must view the private key and the certificate and compare the public key data in each. If the modulus and public exponent values in each file match, then the certificate is associated with that private key. Once you have found the correct certificate and key, update the Stronghold configuration file to use the correct key and certificate file.

  3. Why does Internet Explorer display "An error occurred in the secure channel support"? (top)

    Internet Explorer displays this message if the certificate installed on your server contains a public key larger than 1024 bits. Stronghold allows you to create key pairs up to 4096 bits in length. However, many browsers have problems processing keys longer than 1024 bits.

    To resolve this issue, generate a 1024-bit key pair and CSR and request a new Entrust SSL Certificate.

  4. Why does Netscape Navigator display "The server has encountered bad data from the client"? ( top)

    Netscape Navigator displays this message if the certificate installed on your server contains a public key larger than 1024 bits. Stronghold allows you to create key pairs up to 4096 bits in length. However, many browsers have problems processing keys longer than 1024 bits.

    To resolve this issue, generate a 1024-bit key pair and CSR and request a new Entrust SSL Certificate.

  5. Why do Navigator 3.x users see a "Certificate Authority Expired" message when they connect to my server? ( top)

    They have not yet updated the root certificate in their browsers. See Managing root certificate expiry for recommendations on how to deal with this issue. You will find detailed instructions on how users can update their root certificates in Importing a root certificate into your Web browser.

SSL Certificates

Entrust SSL certificates inspire consumer trust by signifying a Web site's commitment to protecting the personal information of its visitors. By using SSL, companies help ease the security concerns of its customers, leading to a more engaging online experience. An SSL certificate is used to confirm that an SSL encryption algorithm is actively securing data being transmitted to a Web site. Digital certificates usually contain the SSL subscriber's information, the name of the certificate issuer, and the strength of the encryption in use. In addition to the "padlock" icon displayed in Web browsers and the https:// prefix, the SSL certificate is one more indicator customers look for as evidence that a Web site is serious about protecting their information.