Expired VeriSign root certificate

(CR #343954) The VeriSign root certificate has expired in the JDK 1.3 and 1.4 installations used by EAServer. As a result, publishing to the Microsoft UDDI Registry throws a certificate expired exception. For more information on how this problem may affect your applications, see Sun alert notification 57436. To work around this issue:

1. Shut down EAServer.

2. Download the most recent VeriSign PCA root certificates from the VeriSign Web site

3. Unzip the files to a temporary location, for example, /tmp.

4. Change to the bin directory in the JDK 1.4 installation used by EAServer. Import the new certificates with the keytool command. For example, enter the following, all on one line:

   keytool -import -v -keystore $JAGUAR_JDK14/jre/lib/security/cacerts -alias verisignclass3ca2028 -file "/tmp/VeriSign - Thawte Combined Roots/VeriSign_Roots/PCA3ss_v4.509"
   

   When prompted, enter the JDK keystore password. The default is changeit. When prompted, accept the new certificate.

5. Repeat the previous step to update the VeriSign root certificate in the JDK 1.3 installation used by EAServer.

For additional IBM-AIX specific information see the IBM security information Web site

Copyright © 2005. Sybase Inc. All rights reserved.

View this release bulletin as PDF