Date: Sat, 26 Mar 2005 13:34:40 +0530 From: Vissu <ycsvissu@gmail.com> To: freebsd-java@freebsd.org Subject: Java Keytool Assistance Message-ID: <ddaba82a0503260004484a2f6c@mail.gmail.com> In-Reply-To: <ddaba82a05032213016d4b3671@mail.gmail.com> References: <E11ED8B85AEDC54CB452EE76FD4B2901266788@MOU1WNEXMB02.vcorp.ad.vrsn.com> <ddaba82a05032213016d4b3671@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
------=_Part_553_29503467.1111824280648
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Dear Sir,
Here i have a Verisigned(CA) certificate.Iam trying to import
this certificate, it is sucessfully imported to my keystore and it is
sucessfully running.but my problem is when iam trying to view the
certificate by double clicking on the lock symbol of the status bar of
InternetExplorer it was showing both the ISSUED-To and ISSUED-BY are
same and that too it was displaying our domain name.
But actually it has to display like ISSUED-TO as our doamin name
and ISSUED-BY as Verisign.
The process what i have tried to import is first i have created a
new keystore.after creating a keystore i tried to import a Verisigned
Certificate(CA).it was imported sucssfully and ssl is running fine.
Regarding this we have contacted to VeriSign Customer Support
also.They suggested to take assistance from u .
So You please go through the screen shots which is there in this
mail as attachment and please kindly suggest me regarding this.what
may be the reason.and how to solve it.
with knid regards,
vissu
---------- Forwarded message ----------
From: Vissu <ycsvissu@gmail.com>
Date: Wed, 23 Mar 2005 02:31:08 +0530
Subject: Fwd: Clarification (#5947-000087-5358\876796)
To: ramkumar@ycsindia.com, sriicharan@gmail.com, suresh kumar
<sureshkumardv@rediffmail.com>, Suresh Kumar
<sureshkumardv@gmail.com>, sureshkumardv@yahoo.co.in
---------- Forwarded message ----------
From: Support <support@verisign.com>
Date: Tue, 22 Mar 2005 07:16:13 -0800
Subject: Re: Clarification (#5947-000087-5358\876796)
To: ycsvissu@gmail.com
Dear Vissu,
Thank you for the screen shots. This is the behavior we expected.
As we mentioned, we unfortunately do not support the keytool utility
but this issue is caused because the certificate that keytool is point to
is a self created certificate. It is issued to your company and issued by
your company. Some versions of the JDK will create a self signed
certificate after you created the private key file.
You will need to view the contents of the keystore and try to identify
where the self signed certificate is located and where the Verisign
certificate is located. If you can identify the self signed certificate,
you should be able to back the file up or delete it so keytool will only
see the Verisign certificate.
Thank you,
Frank
VeriSign Customer Support
To search for technical and product information please try our updated
support pages at www.verisign.com/support
****************************************************************************
*
ORIGINAL MESSAGE:
-----------------
From: ycsvissu@gmail.com
Posted At: 22:24:38.560 03/21/2005
Posted To: Support
Subject: Re: Clarification
Dear Frank,
Thanks for your kind Response.Here iam sending u the
screen shots of the certificate properties.In this attachment we have
taken the screen shots of the certificate properties.
This attachment contains 2 folders
1. CertificateScreenShots
2. StatusBarScreenShots
The CertificateScreenShots are the screen shots which
we had taken by double clicking on the certificate.
And the StatusBarScreenShots are the screen shots
which we had taken by doube clicking the Lock symbol on the status bar
of the browser.
In the Status Bar Lock screens it is showing the
ISSUED-BY and ISSUED-To are showing same our domain name.but in the
CERTIFICATE properties it was showing the ISSUED-BY as Verisign and
ISSUED-TO as our domain name.
So You please go through the screen shots and please
kindly suggest me regarding this.what may be the reason.and how to
solve it
Thanks and regards,
vissu.
On Mon, 21 Mar 2005 08:30:38 -0800, Support <support@verisign.com> wrote:
> Dear Vissu,
>
> We do not support the keytool utility however the times we have heard of
> this
> happening is when the self created certificate which is generated by
keytool
>
> after creating a key pair, is the certificate that has been applied.
>
> You are correct, the issue to field should indicate the common name of
your
> certificate and the issued by field should mention Verisign or possibly
RSA
> as these are both Verisign issued certificates.
>
> If the issued to and issue by fields are the same, this must be a self
> created certificate
> from the keytool utility.
>
> You should check the keystore as it sounds as if you have imported the
> Verisign certificate
> successfully, yet keytool is pointing to the self created certificate. We
> are not sure, but there
> may be a way to view the contents of the keystore and you might be able to
> determine where
> the two certificates are located this way.
>
> Thank you,
>
> Frank
>
> VeriSign Customer Support
>
> If you would like to check the status of your Digital Certificate order
> please go to https://www.verisign.com/status/
>
> To search for technical and product information please try our updated
> support pages at www.verisign.com/support
>
****************************************************************************
> *
>
> (#5947-000087-5358\875358)
>
> ORIGINAL MESSAGE:
> -----------------
>
> From: ycsvissu@gmail.com
> Posted At: 01:06:55.540 03/21/2005
> Posted To: Support
> Subject: Clarification Regarding SSL
>
> Dear Sir,
>
> Here we are having one small problem.The problem is here we
> have imported the certificate into our keystore sucessfully but when
> we are trying to view the certificate from the browser(Double
> cliocking on the lock symbol of the status bar) it is showing the
> ISSUED-BY AND ISSUSED-TO both are same name.and that to it was showing
> our domain name.The webserver which we are using is Tomcat5.0.25.
>
> Actually it has to show the ISSUED-BY as verisign and ISSUSED-TO
> as our domain name.
>
> So please kindly suggest me regarding this.what may be the
> reason.and how to solve it.
>
> Thanks and regards,
> vissu.
>
>
>
------=_Part_553_29503467.1111824280648--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ddaba82a0503260004484a2f6c>