It's Sunday? Teehee you said root :)
Sent from my iPhone On 08/08/2010, at 10:56 PM, Phil Haeusler <[email protected]> wrote: > Hi Gavin > > Have you imported the eClinic root certificate into the JVM as well? > > I recall on a older (cf7 perhaps, may be older?) server i had to import a > root certificate when i was having trouble with a particular EV cert. In > this case the latest root certificate from the issuing registry wasn't in the > JVM, and even tho i had imported the EV cert, it refused to work without the > root certificated being imported also so the certificate chain could be > validated > > I think i had to do something like view the certificate in a browser and then > walk up the certificate chain, saving the parent certificates and importing > them in. > > Then again, it's late on a Sunday evening, so i could have some of the > details wrong. > > Phil > > > > On 8/08/10 10:38 PM, Gavin Baumanis wrote: >> >> On Aug 6, 10:39 pm, MrBuzzy<[email protected]> wrote: >>> Maybe we can take a step back and get some more details. Because I'm semi >>> confident we're all trying to help Gavin find a solution, preferably before >>> he has to shell out more cash for a different cert. >>> >>> - what sort of certificate is it? >> Ummm dunno - we create all of our own certifcates and self-sign them >> too. >> >>> - where did it come from? >> Us! >> >>> - does the cert match the host name? >> Yup sure does. >> >>> - is the cert issued from one of the 'pre trusted' authorities. >> Nope. >> >>> - is it just an SSL cert or are we talking about client certs too? >> The directories on the server are protected by certifcate >> authentication that are required by the clients to use the >> application. >> >>> - etc >> Our parent company is eClinic. They are an encryption / SSL / PKI >> Specialist. They perform millions of encrypted medical messaging >> transactions. >> >> Our certs are provided to us by their infrastructure. >> There is nothing wierd or odd about the certs they work in IE and >> Mozilla browsers, the command line tells me they are imported >> correctly into the java keystore as does the "certman" plug in. >> >> I am sure it wil be something simple... but I'll be damned if I can >> work it out. >> >> Gavin. >> > > -- > You received this message because you are subscribed to the Google Groups > "cfaussie" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/cfaussie?hl=en. > -- You received this message because you are subscribed to the Google Groups "cfaussie" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/cfaussie?hl=en.
