Norman Maurer (JIRA) wrote:
     [ http://issues.apache.org/jira/browse/JAMES-695?page=all ]

Norman Maurer resolved JAMES-695.
---------------------------------

    Resolution: Invalid
      Assignee: Norman Maurer

Can you explain why this is invalid? I've not tested/analyzed it, but I'm interested in the topic...

Stefano

missing intermediary certificates in keystore ignored
-----------------------------------------------------

                Key: JAMES-695
                URL: http://issues.apache.org/jira/browse/JAMES-695
            Project: James
         Issue Type: Bug
         Components: POP3Server
   Affects Versions: 2.2.0
        Environment: linux, windows
           Reporter: Ralf Hauser
        Assigned To: Norman Maurer

We use a certificate on https://www.privasphere.com where the root certificate 
is part of most standard pre-distributed keystore (CN = QuoVadis Root 
Certification Authority
OU = Root Certification Authority
O = QuoVadis Limited
C = BM) but the intermediary certificate is not (CN = QV Schweiz ICA
OU = Issuing Certificate Authority
O = QuoVadis Trustlink Schweiz AG
C = CH).
When just using the leaf certificate to the java keystore with tomcat and 
james, both firefox and thunderbird complain.
When adding the full certificate chain to the java keystore. The tomcat - 
firefox combination now works fine, james - thunderbird doesn't.
AFAIK, firefox and thunderbird have the identical copies of the trust store and 
tls stack, while james uses the legacy cornerstone/avalone. Can anyone confirm 
the problem?
Feel free to test on smtp.privasphere.com:995



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to