Certificate Install Question
Wednesday, May 20, 2020 at 03:12pmTrying to go thru the steps described here:
https://community.onespan.com/products/onespan-sign/sdks
My keytool list shows the required certificate is not installed (I am using Correto Java 8). I downloaded a cert named 'Root-R3' according to the instructions. Later in the steps it says to install a cert using this command:
keytool -importcert -alias GlobalSignIntermediateCA -keystore <JAVA_HOME/lib/security/cacerts> -file gsdomainvalsha2g2r1.crt
Where is this gsdomainvalsha2g2r1.crt supposed to come from? Am I supposed to rename the file above and import that?
Thanks
Reply to: Certificate Install Question
Wednesday, May 20, 2020 at 04:02pmHi Michael,
This is because the certificates issued to OneSpan Sign instances have recently been expired and we've updated new certificates, as per this documentation.
"Root-R3"("GlobalSign Root CA - R3") is the current root CA for domain "*.esignlive.com" (US2 sandbox and US2 production) versus the "gsdomainvalsha2g2r1.crt" was the old one.
Few notes:
(1)You can either add the OSS instance certificates or directly trust the root CAs' certificates. (in this regard, you may not need to add "GlobalSign Root CA - R3" to your truststore, you can go ahead and try the quick start guides and see if the communication can be established)
(2)different instances have different certificates and maybe even different CAs
(3)The link I sent above includes the download links for updated certificates of all OSS instances.
Duo
Reply to: Certificate Install Question
Thursday, May 21, 2020 at 12:26pmThanks. I also want to point out that the quick-start guide here https://community.onespan.com/documentation/onespan-sign/guides/quick-start-guides/developer/creating-and-sending-package has a link to source code that gives a 404 here: https://community.onespan.com/documentation/onespan-sign/codeshare/simple-create-send-package-java-sdk/
I really appreciate the availability of the documentation but it seems to need a little upkeep.
Mike
Reply to: Certificate Install Question
Thursday, May 21, 2020 at 02:10pmHi Mike,
Thanks for bringing it up to us! I've communicated with our documentation team and the contents and links will be corrected in short time.
In terms of the sample code, you can find it here.
And for more useful examples, you can hover on the "Products" from the global navigator > choose "Code Share" under "OneSpan Sign" > switch the category to "Java SDK". Or simply type in "create package java sdk" in the search bar.
Duo