Re: VeriSign GSID Intermediate Root CA certs

I  had this same problem the other day.  What did I do?
 Went through all the ca and certs in *public, deleted all
the expired ones, created a new store, and exported the
keys to the *system store.

Then deleted my temp store.  The keys placed into the store
I created happened to be up to date.  So go figure.  :)

Brad

On Thu, 15 Jan 2004 16:44:47 -0600 (CST)
 Scott Klement <klemscot@xxxxxxxxxxxx> wrote:
> 
> One of my SSL applications is failing because the CA
> certificate that the
> peer uses is expired.   The peer is using a Verisign
> Class 3 CA.
> 
> Looking in my Digital Certificate Manager, I see that the
> "Verisign Class
> 3 Public Primary Certification Authority" that comes with
> the Digital
> Certificate Manager expired on Jan 7th, 2004.
> 
> I'm trying to figure out how to update it to a new one,
> and I'm getting
> nowhere!  Has anyone solved this problem?
> 
> I've found that IBM has the problem posted in their
> "Flashes" page for IBM
> HTTP server.  Here's a link:
>
http://www-1.ibm.com/support/docview.wss?rs=177&context=SSEQTJ&q1=verisign+ca&uid=swg21156795&loc=en_US&cs=utf-8&lang=en+en
> 
> But, much to my irritation, there are no instructions for
> the iSeries!
> 
> I've also found more information from VeriSign at this
> link:
> http://www.verisign.com/support/vendors/exp-gsid-ssl.html
> 
> I've downloaded the certificate from VeriSign and
> imported it, but the
> Digital Certificate Manager complains that this new
> certificate is also not
> valid -- despite the fact that the DCM itself says it's
> valid until 2011!
> 
> This leads me to believe that there's another
> certificate, a root
> certificate, which is also expired, or that theres more
> steps to do in
> getting the new certificate to work.  But, I haven't been
> able to find out
> any information.
> 
> help!  Does anyone have a link to a page that explains
> what I need to do?
> Has anyone solved this problem?
> 
> Thanks
> 
> 
> _______________________________________________
> This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit:
> http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the
> archives
> at http://archive.midrange.com/midrange-l.
> 

Bradley V. Stone
BVS.Tools
www.bvstools.com