Trouble installing Verisign SSL certificate

Question

I'm using WebLogic 7.0 and need to figure out how to install the SSL certificate.
I've followed the instruction from both Verisign and BEA to install the certificate.
But I could not get pass this error:
####<Oct 24, 2002 3:16:18 PM EDT> <Warning> <Security> <prodmvision02> <myserver>
<main> <kernel identity> <> <090088> <SSL did not find the private key alias on
server myserver for realm myrealm even though this server is configured as a 7.0
server. This data was required by SSL to load the server private key.>
####<Oct 24, 2002 3:16:19 PM EDT> <Alert> <WebLogicServer> <prodmvision02> <myserver>
<main> <kernel identity> <> <000297> <Inconsistent security configuration, java.security.KeyManagementException:
ASN.1: Lengths longer than 32 bits are not supported>
####<Oct 24, 2002 3:16:19 PM EDT> <Emergency> <Security> <prodmvision02> <myserver>
<main> <kernel identity> <> <090034> <Not listening for SSL, java.io.IOException:
Inconsistent security configuration, java.security.KeyManagementException: ASN.1:
Lengths longer than 32 bits are not supported.>
Curently I'm clueless on what has happened. This is the third time I tried to
follow the instruction. Please help.

Answer 1

Hello Patrick,
Thanks for the information:
you created a keypair for SSL in the Key Store service interface in the Visual Administrator, generated a CSR response and sent it to Verisign. Now you have the CSR response from Verisign - is my understanding of the situation correct?
Absolutely right
You can import this into the Key Store service, by highlighting the private key of the keypair and choosing 'Import CSR Response'. Now your key pair is signed.
Successfully done.
After this i can see that PRIVATE KEY (IssueDN has been changed to Verisign)
But CERTIFICATE ISSUER DN is not changed.
Now if i try to access the site with https, able to do properly and if click on the Lock icon on the browser, i can see certificate is 3 Chained
Verisign Trial Secure Server Root CA - G2
----> Verisign Trial Secure Server CA - G2
----> -> Training.pearson.com (this is my Common Name)
So it looks to be working fine.
However there is no chain formed. You need to now follow the aforementioned note and export the private key and public key certificate separately by higlighting the private key and choosing 'Export'. Export with the 'Files of type' drop down box set to (*p8), and after exporting the private key you will be able to export the public key cert. This is step 6 and 7 of the note. Now follow steps 8-12 to form the chain
No Chains has been made in Visual Admin, and i tried these on another server - it works as you are saying.
But is there any benefit of importing Intermediate, Root Certificates - as mentioned in SAP note steps 8 to 12.
If yes, then is it mandatory to make the chain till 3rd level (means Root Certificate also).
Once the chain is loaded into the Key Store, you need to ensure that the Java dispatcher is configured to send the signed server certificate for the relevant SSL ports - see here http://help.sap.com/saphelp_nw04/helpdata/en/5c/15f73dd0408e5be10000000a114084/content.htm
Edited by: Julius Bussche on Aug 10, 2009 3:44 PM
code --> quote