[Ejbca-develop] Replacing Temporary Certificates

[Gerard G. <ge...@si...>]

Hi,

I have be working on separating what I create from the bootstrap
'temporary' certificates that are created when I initially set up EJBCA.
Using: EJBCA 3.0 b2, JBoss 3.2.3, Java 1.4.0, Firefox, IE

There are several things occurring that I would greatly appreciate some
help regarding.

) I cannot seem to create a new Tomcat certificate (from a new CA) that
successfully is accepted by Firefox and IE.  I add the Root to my
cacerts file and Firefox accepts it.  IE will not accept it and gives a
worthless error message 'The Page Cannot be Displayed', suggesting that
the server is not found or a DNS Error.  The certs look identical.  The
differences in the CA are OSCP and CRL definitions.

) When I create an administrator group administrator, it appears as
though there is a lag getting the data into the database.  It is
possible for me to create the administrator, shut down my browser and
start it back up, and EJBCA reports that I do not have privileges.  I
can wait a minute and try it again, and I successfully gain access.

) While in 'Edit Access Rules', pressing Cancel does nothing.

The last one is of no consequence and should be fixed when there's
nothing else to do. :-)

Any help all on the 1st one is greatly appreciated.

Thanks in advance.

Gerard