Michael_S_Smith | Posts: 66

Certificate Install Question

0 votes

Trying to go thru the steps described here:

https://community.onespan.com/products/onespan-sign/sdks

My keytool list shows the required certificate is not installed (I am using Correto Java 8). I downloaded a cert named 'Root-R3' according to the instructions. Later in the steps it says to install a cert using this command:

keytool -importcert -alias GlobalSignIntermediateCA -keystore <JAVA_HOME/lib/security/cacerts> -file gsdomainvalsha2g2r1.crt

Where is this gsdomainvalsha2g2r1.crt supposed to come from? Am I supposed to rename the file above and import that?

 Thanks


Duo_Liang | Posts: 3776

Reply to: Certificate Install Question

0 votes

Hi Michael,

 

This is because the certificates issued to OneSpan Sign instances have recently been expired and we've updated new certificates, as per this documentation

"Root-R3"("GlobalSign Root CA - R3") is the current root CA for domain "*.esignlive.com" (US2 sandbox and US2 production) versus the "gsdomainvalsha2g2r1.crt" was the old one.

Few notes:
(1)You can either add the OSS instance certificates or directly trust the root CAs' certificates. (in this regard, you may not need to add "GlobalSign Root CA - R3" to your truststore, you can go ahead and try the quick start guides and see if the communication can be established)

(2)different instances have different certificates and maybe even different CAs

(3)The link I sent above includes the download links for updated certificates of all OSS instances.

 

Duo

 


Michael_S_Smith | Posts: 66

Reply to: Certificate Install Question

0 votes

Thanks. I also want to point out that the quick-start guide here https://community.onespan.com/documentation/onespan-sign/guides/quick-start-guides/developer/creating-and-sending-package has a link to source code that gives a 404 here: https://community.onespan.com/documentation/onespan-sign/codeshare/simple-create-send-package-java-sdk/

I really appreciate the availability of the documentation but it seems to need a little upkeep.

                            Mike

 


Duo_Liang | Posts: 3776

Reply to: Certificate Install Question

0 votes

Hi Mike,

 

Thanks for bringing it up to us! I've communicated with our documentation team and the contents and links will be corrected in short time.

In terms of the sample code, you can find it here.

And for more useful examples, you can hover on the "Products" from the global navigator > choose "Code Share" under "OneSpan Sign" > switch the category to "Java SDK". Or simply type in "create package java sdk" in the search bar.

 

Duo


Hello! Looks like you're enjoying the discussion, but haven't signed up for an account.

When you create an account, we remember exactly what you've read, so you always come right back where you left off