Govt PKI Certificates

Question

Are there any known issues of using portal with Govt generated PKI Certifcates. I get the following error when I try to access my homepage.
[31/08/2001 10:24:32:687 EDT] page/JNI: Exception when trying to connect in 0.
[31/08/2001 10:24:32:687 EDT] page/ContentFetcher Exception, name=content-fetcher2
javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
When I access the portal with URLs that don't use /pls/portal30, they work just fine.
Thanks,
Robert Gann

Answer 1

Robert,
we had the same problem at our site. It turns out that the instructions provided by the certificate authority for the chain cetificate did not work for Apache and the certificate was not chained correctly.
To fix the problem we went back to the issuing authority's website and selected the option to display the entire chain certificate. We then copied the entire text including comments, and pasted into the certificate chain on our server.
Apparently, the method given in the authority's instructions was not including the original certificate in the chain.
This may be clear as mud since it has been awhile so let me know if you need further clarification and I will go back to the site and retrace my steps.
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Robert Gann ([email protected]):
Are there any known issues of using portal with Govt generated PKI Certifcates. I get the following error when I try to access my homepage.
[31/08/2001 10:24:32:687 EDT] page/JNI: Exception when trying to connect in 0.
[31/08/2001 10:24:32:687 EDT] page/ContentFetcher Exception, name=content-fetcher2
javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
When I access the portal with URLs that don't use /pls/portal30, they work just fine.
Thanks,
Robert Gann<HR></BLOCKQUOTE>
null