On Tue, Nov 03, 2009 at 11:06:21AM -0800, 24z wrote: > We've executed all steps outlined in the various wiki articles to set > up federation. We're using a CAcert.org issued certificate/key. We've > set ping-server in run-server.sh to wavesandbox.com.
No, sorry. However I will list the steps that i have needed to get my cacert.org ceritificate working (Debian and Ubuntu): 1. Change format of the private key: openssl pkcs8 -topk8 -nocrypt -in /etc/ssl/local/microcomaustralia.com.au.key -out microcomaustralia.com.au.key 2. change following config optionws in run-config: PRIVATE_KEY_FILENAME=microcomaustralia.com.au.key CERTIFICATE_FILENAME_LIST=microcomaustralia.com.au.crt,/etc/ssl/certs/class3.pem,/etc/ssl/certs/root.pem WAVESERVER_DISABLE_VERIFICATION=false WAVESERVER_DISABLE_SIGNER_VERIFICATION=false 3. import cacert certificate into Java key store: keytool -importcert -storetype jks -keystore /etc/java-6-sun/security/cacerts -file /etc/ssl/certs/root.pem note the password of the keystore is required, and the default password is "changeit". 4. Have considered adding the class3.pem certificate too, so far it doesn't seem to be required... 5. Still need to test federation. Can't do it from wavesandbox side, as it doesn't appear possible to add the contacts... On that matter, I haven't seen confirmation that the sandbox even accepts the cacert.org certificates yet... -- Brian May <[email protected]> --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Wave Protocol" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/wave-protocol?hl=en -~----------~----~----~----~------~----~------~--~---
