users@glassfish.java.net

Re: Glassfish certificate chain

From: Serge Fonville <serge.fonville_at_gmail.com>
Date: Sat, 22 Aug 2009 12:28:01 +0200

Hi,

I figured out I needed to convert all of them to DER prior to importing them...

I used: http://www.agentbob.info/agentbob/79-AB.html for the steps to
importing the key.

> What error do you have?

I ran:
--
java ImportKey sergefonville.nl.key.der sergefonville.nl.der
I got:
--
Using keystore-file : C:\Users\Serge Fonville\keystore.ImportKey
java.security.cert.CertificateParsingException: no more data allowed
for version 1 certificate
        at sun.security.x509.X509CertInfo.parse(Unknown Source)
        at sun.security.x509.X509CertInfo.<init>(Unknown Source)
        at sun.security.x509.X509CertImpl.parse(Unknown Source)
        at sun.security.x509.X509CertImpl.<init>(Unknown Source)
        at sun.security.provider.X509Factory.parseX509orPKCS7Cert(Unknown
Source)
        at sun.security.provider.X509Factory.engineGenerateCertificates(Unknown
Source)
        at java.security.cert.CertificateFactory.generateCertificates(Unknown
Source)
        at ImportKey.main(ImportKey.java:137)
It looks to me I need to do some extra step, but I have absolutely no
idea what that would be
Thanks,
Serge Fonville
On Sat, Aug 22, 2009 at 1:15 AM, Shing Wai Chan<Shing-Wai.Chan_at_sun.com> wrote:
> What error do you have?
> Shing Wai Chan
>
> Serge Fonville wrote:
>>
>> Hi,
>>
>> I'm trying to setup GlassFish to use my existing certificate chain.
>> I have it running with apache.
>> When I use the instructions from
>>
>> http://javaevangelist.blogspot.com/2006/12/sun-java-system-application-server-9x.html
>> I get an error when I import my server certificate.
>> It says it's not a valid x509 certificate.
>> I think it has to do with some key I need to import somewhere from.
>> I could not determine what key I need and how to import it.
>> I also noticed I had to remove everything from the intermediate
>> certificate  except the BEGIN and END section.
>> I'm not sure how that impacts the chain.
>>
>> What steps do I need to do to get all the information in the keystore?
>>
>> Regards,
>>
>> Serge Fonville
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>
>