Environment
Novell NetWare 6.5 Support Pack 2
Novell ConsoleOne 1.3.6c
Novell iManager 2
Novell Certificate Server 2.43
Novell ConsoleOne 1.3.6c
Novell iManager 2
Novell Certificate Server 2.43
Situation
Console One blows up when importing a Verisign certificate from a PKCS#7, cer or der file.
Resolution
A newer PKIWRAP.DLL (2.2.3.9 or newer) will be released with the fix and should be in a post 2.73 PKI update (nmsrv2351.tgz) during the later part of October 2004.
Alternately, as a work-around, you may use an older\not as recently patched Internet Explorer to perform the chaining of the intermediate to the trusted root.
Lastly, Novell is beginning to put the major root ca's into PKI.NLM. Therefore you could just import the intermediate during the first dialog as the root ca may already be contained in PKI.NLM.
Alternately, as a work-around, you may use an older\not as recently patched Internet Explorer to perform the chaining of the intermediate to the trusted root.
Lastly, Novell is beginning to put the major root ca's into PKI.NLM. Therefore you could just import the intermediate during the first dialog as the root ca may already be contained in PKI.NLM.
Additional Information
In order to combine or chain the intermediate to the root ca these two are ususally imported into IE then exported to a pkcs7 file. This file is used during the first dialog of the import process.
One of the recent Internet Explorer security updates changed the way IE handles base64 encoding. The latest PKIWRAP.DLL ( 2.2.3.8) cannot decode the exported certificate with this change.
Formerly known as TID# 10094691
Formerly known as TID# 10094691
NOVL98976