On Aug 12, 3:18 pm, Nelson Bolyard <[EMAIL PROTECTED]> wrote: > Kyle Hamilton raised the possibility that the error you're seeing is from > the JVM rather than from Mozilla code. If the complaint comes from Java, > which has its own PKI and trusted cert store, then I'd guess that Java > doesn't trust UTN's object root.
I've checked all of the cacerts files that I can find .. all show the USERFirst-Object... not sure what the JVM would use besides ONE of these FOUR ... keytool -v -list -keystore /System/Library/Frameworks/JavaVM.framework/ Versions/1.4.2/Home/lib/security/cacerts : ******************************************* Alias name: keychainrootca-61 Creation date: Apr 11, 2007 Entry type: trustedCertEntry Owner: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US Issuer: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US Serial number: 44be0c8b500024b411d3362de0b35f1b Valid from: Fri Jul 09 11:31:20 PDT 1999 until: Tue Jul 09 11:40:36 PDT 2019 Certificate fingerprints: MD5: A7:F2:E4:16:06:41:11:50:30:6B:9C:E3:B4:9C:B0:C9 SHA1: E1:2D:FB:4B:41:D7:D9:C3:2B:30:51:4B:AC:1D:81:D8:38:5E: 2D:46 ******************************************* keytool -v -list -keystore /System/Library/Frameworks/JavaVM.framework/ Versions/1.5.0/Home/lib/security/cacerts ******************************************* Alias name: keychainrootca-62 Creation date: Apr 11, 2007 Entry type: trustedCertEntry Owner: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US Issuer: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US Serial number: 44be0c8b500024b411d3362de0b35f1b Valid from: Fri Jul 09 11:31:20 PDT 1999 until: Tue Jul 09 11:40:36 PDT 2019 Certificate fingerprints: MD5: A7:F2:E4:16:06:41:11:50:30:6B:9C:E3:B4:9C:B0:C9 SHA1: E1:2D:FB:4B:41:D7:D9:C3:2B:30:51:4B:AC:1D:81:D8:38:5E: 2D:46 ******************************************* keytool -v -list -keystore /System/Library/Frameworks/JavaVM.framework/ Versions/1.6.0/Home/lib/security/cacerts ******************************************* Alias name: keychainrootca-37 Creation date: Jan 14, 2008 Entry type: trustedCertEntry Owner: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US Issuer: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US Serial number: 44be0c8b500024b411d3362de0b35f1b Valid from: Fri Jul 09 11:31:20 PDT 1999 until: Tue Jul 09 11:40:36 PDT 2019 Certificate fingerprints: MD5: A7:F2:E4:16:06:41:11:50:30:6B:9C:E3:B4:9C:B0:C9 SHA1: E1:2D:FB:4B:41:D7:D9:C3:2B:30:51:4B:AC:1D:81:D8:38:5E: 2D:46 ******************************************* Output from keytool -v -list -keystore /Library/Java/Home/lib/security/cacerts ******************************************* Alias name: keychainrootca-62 Creation date: Apr 11, 2007 Entry type: trustedCertEntry Owner: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US Issuer: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US Serial number: 44be0c8b500024b411d3362de0b35f1b Valid from: Fri Jul 09 11:31:20 PDT 1999 until: Tue Jul 09 11:40:36 PDT 2019 Certificate fingerprints: MD5: A7:F2:E4:16:06:41:11:50:30:6B:9C:E3:B4:9C:B0:C9 SHA1: E1:2D:FB:4B:41:D7:D9:C3:2B:30:51:4B:AC:1D:81:D8:38:5E: 2D:46 ******************************************* _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
