Installing Intermediate Certificates for Software Assistant

Page 3

HSCrJfQBY9i+eaUwHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJ

KoZIhvcNAQEFBQADggEBAAyDJO/dwwzZWJz+NrbrioBL0aP3nfPMU++CnqOh5pfB

WJ11bOAdG0z60cEtBcDqbrIicFXZIDNAMwfCZYP6j0M3m+oOmmxw7vacgDvZN/R6

bezQGH1JSsqZxxkoor7YdyT3hSaGbYcFQEFn0Sc67dxIHSLNCwuLvPSxe/20majp

dirhGi2HbnTTiN0eIsbfFrYrghQKlFzyUOyvzv9iNw2tZdMGQVPtAhTItVgooazg

W+yzf5VK+wPIrSbb5mZ4EkrZn0L74ZjmQoObj49nJOhhGbXdzbULJgWOw27EyHW4

Rs/iGAZeqa6ogZpHFt4MKGwlJ7net4RYxh84HqTEy2Y=

-----END CERTIFICATE-----

The certificate should be placed onto the system within a file (including the BEGIN and END CERTIFICATE

markers). In the following examples we assume that this file has been created as CA-V3C3Gint.

To validate the certificate, the openssl command can be used to display the fingerprint:

# openssl x509 -in CA-V3C3Gint -fingerprint -md5

MD5 Fingerprint=3C:48:42:0D:FF:58:1A:38:86:BC:FD:41:D4:8A:41:DE

-----BEGIN CERTIFICATE-----

MIIF7DCCBNSgAwIBAgIQbsx6pacDIAm4zrz06VLUkTANBgkqhkiG9w0BAQUFADCB

yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL

ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJp

U2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxW

…

Installing the intermediate certificates

Once the certificate exists as a verified file on the target system, the keytool command can be used to

import the certificate into the keystore. The commands shown are for an HP-UX system running Java 6;

they may have to be modified to match the location of the keytool command and keystore.

# /opt/java6/jre/bin/keytool -import -trustcacerts \

-keystore /opt/java6/jre/lib/security/cacerts \

-storepass changeit -file CA-V3C3Gint \

-alias "VeriSign Class 3 Public Primary CA – G3"

At this point the certificate should be installed and access to the SWA infrastructure restored.

The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and

services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial

errors or omissions contained herein.

Java® is a US trademark of Sun Microsystems, Inc.

5900-1998, Created September 2011