BlackBerry Forums Support Community
              

Closed Thread
 
LinkBack Thread Tools
Old 07-19-2006, 09:05 AM   #1 (permalink)
New Member
 
Join Date: Jul 2006
Model: 7100T
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Adding untrusted X.509 cert chain to cacerts file

Please Login to Remove!

Good morning,

I have been unsuccessful in my attempt to correctly add an untrusted certificate chain to my BES so that applications which talk to the BES have a trusted SSL link. The Admin Guide is not very helpful (vague).

Specifically, our enterprise uses certs from DST, and DST certs are not loaded into the cacerts file by default (34 other certs are, however).

This certificate chain has a root, a sub-CA, a second sub-CA and the server cert.

I have tried using keytool and importing all three CA certs individually (as a .cer file) into the cacerts file and the import process does work. There are now 37 certs in the cacerts file.

What else needs to be done? Does the server certificate need to be stored somewhere else on the BES? Is there a truststore file or keystore file in addition to the cacerts file that the BES uses?

Is the cacerts file stored in memory and thus the does the BES need to be restarted for the new certs to be seen?

The error message seen on the BB is "Access denied Insecure SSL request"

Any help or guidance is appreciated!

Thanks!
Joe

Last edited by jlareau : 07-19-2006 at 09:34 AM.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Genuine OEM Dell RF223 High Yield Toner Cartridge CN-0RF223 5,000 For 1815dn
$25.0
Genuine OEM Dell RF223 High Yield Toner Cartridge CN-0RF223 5,000 For 1815dn  pictureGenuine OEM Dell 3200MP Osram Replacement Lamp & Housing 310-2328
$79.99
Genuine OEM Dell 3200MP Osram Replacement Lamp & Housing  310-2328 picture(J158) Dell 130w PA-4E OEM (DA130PE1-00) Genuine Laptop AC Power Adapter
$25.0
(J158) Dell 130w PA-4E OEM (DA130PE1-00) Genuine Laptop AC Power Adapter pictureOEM Dell Alienware M17X R2 Video Graphics Card GPU RV546 ATI 5870m 1GB 731MJ
$89.99
OEM Dell Alienware M17X R2 Video Graphics Card GPU RV546 ATI 5870m 1GB 731MJ  pictureGenuine, NEW Dell 3110cn, 3115cn Transfer Belt unit in Box Neo OEM
$199.95
Genuine, NEW Dell 3110cn, 3115cn Transfer Belt unit in Box Neo OEM picture






Copyright 2004-2016 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.