X509 certificates

[Guest]

Hi there,

How do i create X509 certificates for server authentication. I want to use
JNDI API to access data from AD using SSL. Here is my scenario.

1. Win 2003 box on a private domain 'mydomain.net'.
2. Active directory domain controller is obviously has
FQDN=<myhost>.mydomain.net
3. My certification authority is set up with enterprise root as
'my-enterprise (i tried standalone CA also).
4. I followed the steps on
http://support.microsoft.com/default.aspx?scid=kb;en-us;321051#XSLTH3154121122120121120120
but my client can not trust the certificate. It throws an exception -
"javax.net.ssl.SSLHandshakeException:
java.security.cert.CertificateException: Could not find trusted certificate"
5. My client is on the same machine.
6. i am using 'keytool' to import the certifcate into my JRE's cert store.

Any help will be appreciated.

Thanks
Anup

 

[Eduard Koller [MSFT]]

What do you mean by "JRE's cert store"?
You may need to add the issuer CA's certificate to your client's NTAuth
store.

--
Eduard Koller[MS]

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm