Re: [cobalt-users] Equifax cert install problem on RAQ4

[mike <jns-michael@xxxxxxxx>]

Hello cobalt-users,

I  recieved  the  solution  to this problem from Taco Scargo @ Sun. It
solved my problem instantly. I thought I'd post the solution here (see
below) for others who might have the same problem in the future.

BTW  -  for  those of you looking for certs, stay away from Equifax! I
have  left numerous emails and voicemails for their support department
over the last few weeks, and have yet to hear back.

I  have  also  spent  the last two weeks trying to get a new cert from
them. Again, no matter how much I try, I can't get a response.

So - stay away! Equifax bad!

--
Thank You...
 
mike 
mailto:jns-michael@xxxxxxxx
                

This is a forwarded message
From: Taco Scargo - Sun Holland - Leiden <Taco.Scargo@xxxxxxx>
To: cobalt-developers@xxxxxxxxxxxxxxx
Date: Monday, July 16, 2001, 5:11:59 AM
Subject: [cobalt-developers] Equifax cert problems!

=================Original message text===============
Hi Mike,

> Has anyone out there been successful installing an equifax secure cert
> on  a RAQ 4 for a virtual site?
Yes, see https://www.yournic.com

> I also added this line to the httpd.conf, per the instructions:
> 
> $PerlConfig .= "SSLCACertificateFile/home/sites/$group/certs/equifaxca2\n";
Don't include this in the Perl config area.
Please delete the line again, and search for a line "SSLCACertifcateFile 
/etc/httpd/conf/ca-bundle. You can add multiple CACerts to this file.
Uncomment this line, and change the path. Better would be to add the cert to 
this file (it probably needs to be created). Any SSL site can now use Equifax 
certs without a problem. Don't forget to add this line to 
/etc/admserv/conf/ssl.conf as well.

With regards,

Taco Scargo

Professional Services Manager, EMEA

Sun Microsystems                Tel. +31 (71) 565 7021
Sun Cobalt Server Appliances    taco.scargo@xxxxxxx




Tuesday, July 10, 2001, 1:21:55 PM, I wrote:

m> Hello List,

m> Has anyone out there been successful installing an equifax secure cert
m> on  a RAQ 4 for a virtual site?

m> Part  of the problem, no doubt, is that equifax's instructions contain
m> at  least  one mistake. For example, in their provided instructions to
m> install their root file (not the site's cert), they say:

m> "Save  the  Equifax  Secure  eBusiness  CA-2 certificate (using a text
m> editor)   as   "equifaxca2"  or  "ca"  Be  sure  to  include  ---BEGIN
m> CERTIFICATE--- and ---END CERTIFICATE---".

m> Well,  their  root  file,  when edited with a text file, contains only
m> non-intelligible  data,  and certainly no "---BEGIN CERTIFICATE--- and
m> ---END CERTIFICATE---"

m> Anyway,  after  pasting  the  site's new cert over the cert request, I
m> installed  equifax's  root  file  in  the  virtual site's directory as
m> instructed:

m>     /home/sites/site##/certs/equifaxca2

m> I also added this line to the httpd.conf, per the instructions:

m> $PerlConfig .= "SSLCACertificateFile/home/sites/$group/certs/equifaxca2\n";

m> Now, I get this error when I restart the webserver:

m> '/home/sites/site1/ certs/equifaxca2' not exists or empty

m> Well,  site  1  is  not  supposed  to be using an equifax secure cert,
m> another virtual site is. (site 1 just uses a self-signed cert).

m> Any ideas?

m> Sorry for the long winded post, but i am pulling my hair out!