Unable to aprouve definitively certificate by sun one console

Hello,

I have a problem when I try to access to my Directory by the server console.

- this console has been installed on Solaris server at the same time of Directory Server 5.2 installation - i installed the directory server by choosing "Sun ONE Servers : this option Installs the Sun ONE servers, Sun ONE Server Console, and related components .

- note that i configure ssl for Administration server

--

When i try to connect by the server console using https ( https://server:port)

i have the following warning message:

- "The certificate this server present is eirther untrusted or unknow

the server can only communicate through a secure connection involving a certificate. Do you wish to acept this certificate?"

- when i accept, I can connect to directory server. But each time i try to connect to Directory by the server console i have this same warning message.

If i try to connect to the directory by a client console ( a console installed on my Windows machine ) this warning message does'nt appear.

How can i do to accept definitivly this certificate when i use the server console?

Somebody can help me?

[1200 byte] By [Petty] at [2007-11-26 10:35:29]
# 1

Where did you get the SSL certificate from that you installed on your LDAP server. Did you create your own self-signed certificate or did someone in your company issue it for you?

Basically, you need to import the public signer certificate of the CA that signed that ldap certificate into your trusted CA certificate database.

rdevries at 2007-7-7 2:46:07 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2

The SSL certificate for administration server has been issued by someone in my company.

To install SSL,i done the following steps by the console:

- I created the certificate database

- I generated the certificate request (the server name field contain the fully qualified hostname of the Directory Server)

- I Transmited the request to my Certificate Authority

- I installed the server certificate

- I Trusted the Certificate Authority

- I activated the SSL

I don't understand why i can't aprouve definitivly the certificate when i use the server console ( console installed at the same time of directory server installation, on solaris system).

I don't understand why i can approuve definitivly the certificate when i connect to the directory by a client console ( eg, a console installed on my windows machine).

is there a problem with the jre used by the console?

Petty at 2007-7-7 2:46:07 > top of Java-index,Web & Directory Servers,Directory Servers...
# 3
I am configuring a new Directory Server instance on my machine this morning .. (for testing purposes of some issues I am dealing with).Let me enable SSL with self-signed certificates as well and see what's needed to permanently accept it.
rdevries at 2007-7-7 2:46:07 > top of Java-index,Web & Directory Servers,Directory Servers...
# 4

So, I setup a LDAP server, configured SSL, and indeed, when you connect with the client, it pops up a window whether you want to accept it or not.

There is one checkbox that says "for this session only". DO NOT click that.

Just click "accept".

I did that, and never got prompted again.

rdevries at 2007-7-7 2:46:07 > top of Java-index,Web & Directory Servers,Directory Servers...
# 5

The first problem is that i just clic accept . I don't use "for this session only"

The another problem is that there is a difference using a client console and a server console.

My directory is installed on a solaris server.

- when i connect to directory using a console installed on my windows machine there is no problem.

- when i use the console installed on solaris, this console request me at each session.

Message was edited by:

Petty

Petty at 2007-7-7 2:46:07 > top of Java-index,Web & Directory Servers,Directory Servers...