your description is different than what I have, the keychain got much
overhauled in 10.5.
In 10.5 I can see the list of all certifcates and where they are.
Thawte Personal Freemail CA is in my system roots (I believe this is
the default)
Thawte Personal Freemal Issue CA is my sesion's keychat.
my cert is in there as well.
For each of them the "default system behaviour is shown" is the trust
level.
All the thawte CA certs I have in my keychain are not expired (though
some of my certs are).
I'm using 10.5.5 using JDK 1.6 on a MacBookPro.
Which message did you get when accessing my website?
"Cannot verify authenticity" or simply "trust that guy? his
authenticity is verified" ?
thanks in advance
paul
Le 24-sept.-08 à 20:28, Greg Guerin a écrit :
You should confirm that you have the relevant Thawte CA present in
your set of trusted certificates.
[...]
Basically, if Thawte isn't in any keychain (certificate store), or
the keychain (certificate store) where Thawte's certificate resides
isn't enabled for the user, then none of the certs issued by Thawte
can be verified. Because keychains can be managed by the user, you
may have disabled something in the past.
Another possibility is that you somehow have an expired Thawte CA
cert in your keychain. Use the detailed view of the relevant Thawte
CA in the Keychain detail list to confirm validity dates.
If you still can't get it to work, please post the OS and Java
version you're using.
I tried accessing your website from a 10.4.9 machine with Java 5,
and it did present the Trust/Don't Trust dialog. I used this to
view the Thawte root CA and issuing CA info. This was identical to
the info in my X509Certificates and X509Anchors keychains.
-- GG
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Java-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/java-dev/email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Java-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/java-dev/email@hidden
This email sent to email@hidden
