Re: [Ejbca-develop] Problem with HTTP Strict Transport Security (HSTS)

[Tomas G. <to...@pr...>]

What web browser are you using?

It looks like you just need to set the CA certificate to "trusted", as
you do in FireFox for example. You can do that where you view CA
certificates under settings in FF, Preferences->Advanced->View
Certificates->Authorities.

Regards,
Tomas
**********
PrimeKey Solutions AB
Lundagatan 16, 171 63 Solna, Sweden
Mob: +46 (0)707421096
Internet: www.primekey.se
Twitter: twitter.com/primekeyPKI
**********

On 2016-04-16 17:00, Maurício Giacomini Penteado wrote:
> Dear friends
> 
> If anyone can help me please ...
> 
> Using EJBCA I created a Certificate Authority and I issued two
> certificates TLS, one for my http sever and other to do logon. But when
> I try do logon the browser´s are blocking me with follows errors:
> 
>     Peer's Certificate issuer is not recognized.
> 
>     HTTP Strict Transport Security: false
>     HTTP Public Key Pinning: false
> 
> 
>     rootca.xxxx.com <http://rootca.lcmtec.com.br/> uses an invalid
>     security certificate. The certificate is not trusted because the
>     issuer certificate is unknown. The server might not be sending the
>     appropriate intermediate certificates. An additional root
>     certificate may need to be imported. Error code:
>     SEC_ERROR_UNKNOWN_ISSUER
> 
> 
> On EJBCA Logs:
> 
>     22:10:20,107 INFO
>      [org.cesecore.authorization.control.AccessControlSessionBean]
>     (default task-2) Authorization failed for E=c...@xx...
>     <mailto:co...@lc...> of type
>     X509CertificateAuthenticationToken for the resource
> 
> 
> I dont know where I am missing, maybe on some place in Certificate
> Profiles or Entity Final Profiles on some property that I forgot setting.
> I will greatly appreciate some help.
> 
> Kind regards,
> Maurício G. Penteado
> 
> 
> 
> 
> 
>  
> 
> 
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>