You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Stefan Seelmann (JIRA)" <ji...@apache.org> on 2010/03/24 18:09:27 UTC

[jira] Commented: (DIRSTUDIO-642) ADS does not remember the certificate if two certificates are used for the same server

    [ https://issues.apache.org/jira/browse/DIRSTUDIO-642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12849282#action_12849282 ] 

Stefan Seelmann commented on DIRSTUDIO-642:
-------------------------------------------

We use the subject DN as alias to store the certificates in the key store. In your case the subject DN of both certificates is equal: CN=SFIDC.Sanofi.priv

We have to check if we can use another alias, e.g. by adding the serial number or by using the SHA1 hash.


> ADS does not remember the certificate if two certificates are used for the same server
> --------------------------------------------------------------------------------------
>
>                 Key: DIRSTUDIO-642
>                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-642
>             Project: Directory Studio
>          Issue Type: Bug
>          Components: studio-apacheds
>    Affects Versions: 1.5.2
>         Environment: Windows Vista 32 bit
>            Reporter: Matthieu Turpault
>            Priority: Minor
>         Attachments: screenshot-1.jpg, screenshot-2.jpg
>
>
> * Install two directories on the same server
> * Configure LDAPs for both directories with differente certificate
> * Connect to the first directory with ADS by using LDAPs
> * Choose "Always trust this certificate"
> * Disconnect from the first directory
> * Connect to the second directory with ADS by using LDAP
> * Choose "Always trust this certificate"
> * Disconnect from the first directory
> * Connect to the first directory with ADS by using LDAPs
> * Although that "Always trust this certificate" has been first chosen, the popup "certificate trust" is displayed

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.