RE: VeriSign GSID Intermediate Root CA certs

["Norbut, Jim" <Jim.Norbut@xxxxxxxxxxxxxxx>]

I had to call IBM support and they provided me with Class 2 & Class 3 certs.
because my class 2, class 3, and my verisign test certificate had expired.
 
I imported class 2 and class 3, deleted the test one and now I am back in 
business.
 
contact me offline and I can provide the files for you...if you can't get 
anywhere.
 
Jim Norbut
Systems Administrator
Grubb & Ellis Company
 

        -----Original Message----- 
        From: midrange-l-bounces@xxxxxxxxxxxx on behalf of Scott Klement 
        Sent: Thu 1/15/2004 4:44 PM 
        To: midrange-l@xxxxxxxxxxxx 
        Cc: 
        Subject: VeriSign GSID Intermediate Root CA certs
        
        


        One of my SSL applications is failing because the CA certificate that 
the
        peer uses is expired.   The peer is using a Verisign Class 3 CA.
        
        Looking in my Digital Certificate Manager, I see that the "Verisign 
Class
        3 Public Primary Certification Authority" that comes with the Digital
        Certificate Manager expired on Jan 7th, 2004.
        
        I'm trying to figure out how to update it to a new one, and I'm getting
        nowhere!  Has anyone solved this problem?
        
        I've found that IBM has the problem posted in their "Flashes" page for 
IBM
        HTTP server.  Here's a link:
        
http://www-1.ibm.com/support/docview.wss?rs=177&context=SSEQTJ&q1=verisign+ca&uid=swg21156795&loc=en_US&cs=utf-8&lang=en+en
        
        But, much to my irritation, there are no instructions for the iSeries!
        
        I've also found more information from VeriSign at this link:
        http://www.verisign.com/support/vendors/exp-gsid-ssl.html
        
        I've downloaded the certificate from VeriSign and imported it, but the
        Digital Certificate Manager complains that this new certificate is also 
not
        valid -- despite the fact that the DCM itself says it's valid until 
2011!
        
        This leads me to believe that there's another certificate, a root
        certificate, which is also expired, or that theres more steps to do in
        getting the new certificate to work.  But, I haven't been able to find 
out
        any information.
        
        help!  Does anyone have a link to a page that explains what I need to 
do?
        Has anyone solved this problem?
        
        Thanks
        
        
        _______________________________________________
        This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
        To post a message email: MIDRANGE-L@xxxxxxxxxxxx
        To subscribe, unsubscribe, or change list options,
        visit: http://lists.midrange.com/mailman/listinfo/midrange-l
        or email: MIDRANGE-L-request@xxxxxxxxxxxx
        Before posting, please take a moment to review the archives
        at http://archive.midrange.com/midrange-l.