Console One blows up when importing a Verisign certificate from a PKCS#7, cer or der file.
(Last modified: 12Oct2004)
This document (10094691) is provided subject to the disclaimer at the end of this document.
fact
Novell NetWare 6.5 Support Pack 2
Novell ConsoleOne 1.3.6c
Novell iManager 2
Novell Certificate Server 2.43
symptom
Console One blows up when importing a Verisign certificate from a PKCS#7, cer or der file.
cause
In order to combine or chain the intermediate to the root ca these two are ususally imported into IE then exported to a pkcs7 file. This file is used during the first dialog of the import process.
One of the recent Internet Explorer security updates changed the way IE handles base64 encoding. The latest PKIWRAP.DLL ( 2.2.3.8) cannot decode the exported certificate with this change.
fix
A newer PKIWRAP.DLL (2.2.3.9 or newer) will be released with the fix and should be in a post 2.73 PKI update (nmsrv2351.tgz) during the later part of October 2004.
Alternately, as a work-around, you may use an older\not as recently patched Internet Explorer to perform the chaining of the intermediate to the trusted root.
Lastly, Novell is beginning to put the major root ca's into PKI.NLM. Therefore you could just import the intermediate during the first dialog as the root ca may already be contained in PKI.NLM.
document
| Document Title: | Console One blows up when importing a Verisign certificate from a PKCS#7, cer or der file. |
| Document ID: | 10094691 |
| Solution ID: | NOVL98976 |
| Creation Date: | 21Sep2004 |
| Modified Date: | 12Oct2004 |
| Novell Product Class: | Novell Directory Services |
disclaimer
The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.