Expired VeriSign root certificate

(CR #345078) The VeriSign root certificate has expired in the JDK 1.3 and 1.4 installations used by EAServer. As a result, publishing to the Microsoft UDDI Registry throws a certificate expired exception. For more information on how this problem may affect your applications, see Sun alert notification 57436. To workaround this issue:

1. Shut down EAServer.

2. Download the most recent Verisign PCA root certificates from the VeriSign Web site

3. Unzip the files to a temporary location, for example, /tmp.

4. Change to the bin directory in the JDK 1.4 installation used by EAServer. Import the new certificates with the keytool command. For example (all on one line):

   keytool -import -v -keystore $JAGUAR_JDK14/jre/lib/security/cacerts -alias verisignclass3ca2028 -file "/tmp/VeriSign - Thawte Combined Roots/VeriSign_Roots/PCA3ss_v4.509"
   

   When prompted, enter the JDK key store password. The default is changeit. When prompted, accept the new certificate.

5. Repeat the previous step to update the VeriSign root certificate in the JDK 1.3 installation used by EAServer.

For additonal Linux specific information see the Java download site

Copyright © 2004. Sybase Inc. All rights reserved.

View this release bulletin as PDF