Re: [Ejbca-develop] Replacing Temporary Certificates

[Philip V. <ph...@mu...>]

Hi

1. Do you get the same error when you try to go the the noclientcert port
8442/ejbca? Which CA have issued the administrator certificate? Is the new CA
cert importet into IE?

2. The lag of the authorization module is intended to be this way in an effort
to enhance performance. All authorizationdata is cached in memory for speed, and
the cache isn't updated instantly. I could alter the update interval if the
behaviour is annoying.

3. I will look at the cancel button when I have time.

Philip


Gerard Gagliano <ge...@si...> said:

> Hi,
>
> I have be working on separating what I create from the bootstrap
> 'temporary' certificates that are created when I initially set up EJBCA.
> Using: EJBCA 3.0 b2, JBoss 3.2.3, Java 1.4.0, Firefox, IE
>
> There are several things occurring that I would greatly appreciate some
> help regarding.
>
> ) I cannot seem to create a new Tomcat certificate (from a new CA) that
> successfully is accepted by Firefox and IE.  I add the Root to my
> cacerts file and Firefox accepts it.  IE will not accept it and gives a
> worthless error message 'The Page Cannot be Displayed', suggesting that
> the server is not found or a DNS Error.  The certs look identical.  The
> differences in the CA are OSCP and CRL definitions.
>
> ) When I create an administrator group administrator, it appears as
> though there is a lag getting the data into the database.  It is
> possible for me to create the administrator, shut down my browser and
> start it back up, and EJBCA reports that I do not have privileges.  I
> can wait a minute and try it again, and I successfully gain access.
>
> ) While in 'Edit Access Rules', pressing Cancel does nothing.
>
> The last one is of no consequence and should be fixed when there's
> nothing else to do. :-)
>
> Any help all on the 1st one is greatly appreciated.
>
> Thanks in advance.
>
> Gerard
>
>