Cause he said so ;-) Please read his comment. I add the link to the wiki as he suggested..

bye
Norman

Stefano Bagnara schrieb:
Norman Maurer (JIRA) wrote:
     [ http://issues.apache.org/jira/browse/JAMES-695?page=all ]

Norman Maurer resolved JAMES-695.
---------------------------------

    Resolution: Invalid
      Assignee: Norman Maurer

Can you explain why this is invalid? I've not tested/analyzed it, but I'm interested in the topic...

Stefano

missing intermediary certificates in keystore ignored
-----------------------------------------------------

                Key: JAMES-695
                URL: http://issues.apache.org/jira/browse/JAMES-695
            Project: James
         Issue Type: Bug
         Components: POP3Server
   Affects Versions: 2.2.0
        Environment: linux, windows
           Reporter: Ralf Hauser
        Assigned To: Norman Maurer

We use a certificate on https://www.privasphere.com where the root certificate is part of most standard pre-distributed keystore (CN = QuoVadis Root Certification Authority
OU = Root Certification Authority
O = QuoVadis Limited
C = BM) but the intermediary certificate is not (CN = QV Schweiz ICA
OU = Issuing Certificate Authority
O = QuoVadis Trustlink Schweiz AG
C = CH).
When just using the leaf certificate to the java keystore with tomcat and james, both firefox and thunderbird complain. When adding the full certificate chain to the java keystore. The tomcat - firefox combination now works fine, james - thunderbird doesn't. AFAIK, firefox and thunderbird have the identical copies of the trust store and tls stack, while james uses the legacy cornerstone/avalone. Can anyone confirm the problem? Feel free to test on smtp.privasphere.com:995



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

!EXCUBATOR:1,455da3cf53071097514530!



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to