Re: UTN-USERFirst-Object - "Can't verify signature

2008-08-13 Thread bmo
Looking for more information on this issue, I've looked for signed applets that DO WORK on Firefox 3.0.1/mac osx. Again, 'works' is defined as if the applet is signed, with a valid cert, and chain of trust to a trusted root CA, then no scary-and- confusing-to-a-user messages should come up. Here's

Re: UTN-USERFirst-Object - "Can't verify signature

2008-08-13 Thread bmo
On Aug 12, 7:37 pm, "Kyle Hamilton" <[EMAIL PROTECTED]> wrote: > Could you perhaps post your certificate chain? > > -Kyle H > What is presented in the browser for the certificate chain: http://www.tryventi.com/certissue/trust1.png http://www.tryventi.com/certissue/trust2.png http://www.tryventi.c

Re: UTN-USERFirst-Object - "Can't verify signature

2008-08-12 Thread bmo
I just pulled out a Windows Vista Machine -- with Firefox 2.0.15, and hit the page with our signed java applet on it -- SUCCESS -- I am provided a prompt that says the applet verified, do I want to run the code? I then installed FF 3.0.1 on the Vista machine. Reset the JVM cache; hit the same page

Re: UTN-USERFirst-Object - "Can't verify signature

2008-08-12 Thread bmo
As a followup -- on Firefox 2.0.15 (Windows Vista), hitting our same page with an applet signed by our cert as with FF 3.0.1 on Mac, the dialog comes up as "Signature is verified, do you want to run this code?" - SUCCESS. That machine has never seen our signed java applet before; it has no certi

Re: UTN-USERFirst-Object - "Can't verify signature

2008-08-12 Thread bmo
On Aug 12, 3:18 pm, Nelson Bolyard <[EMAIL PROTECTED]> wrote: > Kyle Hamilton raised the possibility that the error you're seeing is from > the JVM rather than from Mozilla code.  If the complaint comes from Java, > which has its own PKI and trusted cert store, then I'd guess that Java > doesn't t

Re: UTN-USERFirst-Object - "Can't verify signature

2008-08-12 Thread bmo
On Aug 12, 1:40 pm, "Kyle Hamilton" <[EMAIL PROTECTED]> wrote: > Er.  Java on the Mac might use the system Keychain, instead of the > Firefox security module.  Try looking in Keychain Access for the > UTN-USERFirst certificate, and then try installing it into Keychain > Access, and try it again. G

Re: UTN-USERFirst-Object - "Can't verify signature

2008-08-12 Thread bmo
On Aug 11, 9:42 pm, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > bmo wrote, On 2008-08-11 20:22: > > > Summary: I suspect that there's something wrong with the BUILT-IN Root > > CA cert UTN-USERFirst-Object in Firefox 3.0.1. > Look at your cert in FF2.  Look at

UTN-USERFirst-Object - "Can't verify signature

2008-08-11 Thread bmo
Summary: I suspect that there's something wrong with the BUILT-IN Root CA cert UTN-USERFirst-Object in Firefox 3.0.1. We were issued a code signing certificate which was signed by the UTN- USERFirst-Object cert built into Firefox (Comodo issues these). We have successfully signed our jar file wit