On Thu, 28 Apr 2005 15:01:51 -0700, Nelson B wrote: > Ronin wrote: >> Hi all, >> I'm working with Sun One Application Server 7 > > I'm not familiar with all the version numbers of all the individial > component products of Sun's family of servers, but I know that Sun > servers continued to use cert7.db long after NSS had switched to > cert8.db. Modern NSS tools (such as certutil) will add the new > certs to cert8.db, but will not put them back into the older cert7.db > files. So, if your server uses cert7.db, and you used certutil to > import the certs into cert8.db, that would explain it. > > Conversely, if you're using a rather old certutil from the cert7.db > era, and your server is using the newer cert8.db, then the problem may > be that your certutil is putting the cert into the older cert DB. > > In short, your certutil and your server must use the same version of > certX.db (where X is 7 or 8).
I saw all the issues about cert7/8.db and older/newer versions of Sun One and nss. My Sun One version is using cert7.db because it was upgraded from an older version using it. But, if I access to the web interface, cert8.db is created and used. My last try was to delete all certX.db and reimport everything using nss-3.9, creating only cert8.db. But the result is still the same! :( As already said, I open the web interface, remove the CA imported with nss, reimport it through the interface... and it works. -- Ronin _______________________________________________ mozilla-crypto mailing list [email protected] http://mail.mozilla.org/listinfo/mozilla-crypto
