CRL import error: Issuer's V2 Certificate Revocation List has an unknown critical extension.

This is a multi-part message in MIME format.

------=_NextPart_000_00EA_01CBE9A2.09F1DAD0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hello,

 

  We are using JSS in our application. We are working with CRL to do
verification of certificates. the below mention code : 

 

                                CryptoManager.initialize("e:\\jss");

                                CryptoManager cm =
CryptoManager.getInstance();

                                cm.importCRL(val,null);

 

                where val is a byte array got from CRL. 

                

                This code is throwing exception like : 

 

                 org.mozilla.jss.CRLImportException: Failed to import
Revocation List: (-8043) Issuer's V2 Certificate Revocation List has an
unknown critical extension.

                at org.mozilla.jss.CryptoManager.importCRLNative(Native
Method)

                        at
org.mozilla.jss.CryptoManager.importCRL(CryptoManager.java:1115)

                        at
jss.sample.cert.CRLDownLoader.main(CRLDownLoader.java:114)

 

Please advice.

 

 

_____________________________________________
Mangesh Divekar
Sunbridge Software Services
6 Gayatri Apart, Amchi Colony, Bavdhan, Pune (India)
T: 91 20 22953290
F: 91 20 22953291
M: 91 9890722090
W:  <http://www.sunbridgeindia.com> www.sunbridgeindia.com
Business Process Automation | Application Development |Testing Services |
Application Packaging | 
____________________________________________

 

DynamicsS(rgb)

 


------=_NextPart_000_00EA_01CBE9A2.09F1DAD0--

0
Mangesh
3/23/2011 4:04:01 PM
mozilla.dev.tech.crypto 2018 articles. 1 followers. Post Follow

0 Replies
569 Views

Similar Articles

[PageSpeed] 13

Reply:

Similar Artilces:

Importing CRL's (certificate revocation lists) on WS2003
Hi,My problem is very simple: How do I import CRL's from the command line on Windows Server 2003 without installing the .NET SDK or Certificate Services? A bit of background: In my application, I allow users to log on using client certificates. I use the standard mechanisms (X509Chain etc.) for checking the validity of the certificate.  However, it is a customer requirement that the CA's revocation list is polled every 10 minutes or so. Therefore, I need to schedule a job that downloads the CRL and imports it. One option is to install the .NET SDK and use certmgr.exe, ...

How do I import SeaMonkey v2.0.14's addressbooks into SeaMonkey v2.9.1's addresbooks?
Hello! I did a clean installation of v2.9.1 and manually copied over my old SM v2.0.14 addressbooks, bookmarks, and e-mails to my Linux/Debian box. I got my bookmarks imported manually, but I can't seem to import my old addresssbooks from *.mab files. Do I really have to export them to non ..mab formats and then import from them? Thank you in advance. :) -- "The ants are back Ted!" --Dougal from Father Ted TV show. /\___/\ Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site) / /\ /\ \ Ant's Quality Foraged Links: http://aqfl.ne...

superreview requested: [Bug 217387] CRL's AuthorityKeyID ignored when finding issuer CA cert : [Attachment 140581] patch part 1 v1
Nelson Bolyard <MisterSSL@aol.com> has asked Wan-Teh Chang <wchang0222@aol.com> for superreview: Bug 217387: CRL's AuthorityKeyID ignored when finding issuer CA cert http://bugzilla.mozilla.org/show_bug.cgi?id=217387 Attachment 140581: patch part 1 v1 - use keyID at CRL import time http://bugzilla.mozilla.org/attachment.cgi?id=140581&action=edit ------- Additional Comments from Nelson Bolyard <MisterSSL@aol.com> Please read the comments above in this bug prior to review. ...

superreview granted: [Bug 408412] Components.utils.import throws NS_ERROR_FILE_NOT_FOUND when there's a syntax error : [Attachment 332229] patch v2
Brendan Eich <brendan@mozilla.org> has granted Blake Kaplan <mrbkap@gmail.com>'s request for superreview: Bug 408412: Components.utils.import throws NS_ERROR_FILE_NOT_FOUND when the= re's a syntax error https://bugzilla.mozilla.org/show_bug.cgi?id=3D408412 Attachment 332229: patch v2 https://bugzilla.mozilla.org/attachment.cgi?id=3D332229&action=3Dedit ------- Additional Comments from Brendan Eich <brendan@mozilla.org> >+ // If |exception| is non-null, then our caller wants to propagate any >+ // exceptions out to our caller. Ensure that ...

superreview requested: [Bug 408412] Components.utils.import throws NS_ERROR_FILE_NOT_FOUND when there's a syntax error : [Attachment 332229] patch v2
Blake Kaplan <mrbkap@gmail.com> has asked Brendan Eich <brendan@mozilla.org> for superreview: Bug 408412: Components.utils.import throws NS_ERROR_FILE_NOT_FOUND when there's a syntax error https://bugzilla.mozilla.org/show_bug.cgi?id=408412 Attachment 332229: patch v2 https://bugzilla.mozilla.org/attachment.cgi?id=332229&action=edit ------- Additional Comments from Blake Kaplan <mrbkap@gmail.com> The functional difference here is that in the case where we don't find the file, we explicitly return NS_ERROR_FILE_NOT_FOUND (since on some systems we coul...

superreview denied: [Bug 217387] CRL's AuthorityKeyID ignored during CRL verification : [Attachment 140581] patch part 1 v1
Julien Pierre <jpierre@aol.net> has denied Nelson Bolyard <MisterSSL@aol.com>'s request for superreview: Bug 217387: CRL's AuthorityKeyID ignored during CRL verification http://bugzilla.mozilla.org/show_bug.cgi?id=217387 Attachment 140581: patch part 1 v1 - use keyID at CRL import time http://bugzilla.mozilla.org/attachment.cgi?id=140581&action=edit ...

Can't get error list back to it's spot
Ok, so I tried to make the error list a little smaller (not in debugging mode), and I removed it from it's spot in the bottom.  When I dock it back, the windows behind don't resize. What do I do to get the original view back?   I tried again, now it's in the right spot. Thx ...

After Importing a p12 file, certificate does not show in the certificate list and no error message was shown
Description From Ricardo Camacho 2009-05-06 09:54:55 PDT User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: 1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729) Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: 1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729) Hello guys, I've just created an application that generates .p12 certificates. I can import them correctly onto the windows keystore with no problem and all the extensions are there as well as the information. Before you ask yes I am sure I'm...

Error: Unable to write to the 'http' network connection. No error or unknown error.
ASA 8.0.2.4332 Any idea what could cause the error? The error occurs after about 11 minutes of ML server activity (see log below). Following are some of the parameters I'm using along with an excerpt from the ML server output log (mlserver.mls). I'm trying to synchronize over http using port 2439. Please let me know if you need any additional info. Thanks in advance for any assistance, Sacha redirector.config entries: ###### # Note:The consolidated database and the synchronization server reside on the same machine ###### SLEEP=1800 ML_CLIENT_TIMEOUT=1800 RED...

Importing Delphi Web Services into Java, error 'unknown soapaction' [Edit]
the error is 'unknown soapaction"http://namedspace/AddEmp"' AddEmp is a method. I gave JAVAer the wsdllocation 'http://ip:8080/soap/IintfServer'. but he call the method - AddEmp show the error above. Please help me.THX.Checked All kinds of material,but no way. my problem or his? Edited by: Fan Kaiyi on Oct 9, 2012 2:53 AM Edited by: Fan Kaiyi on Oct 9, 2012 2:54 AM Edited by: Fan Kaiyi on Oct 9, 2012 6:56 PM > {quote:title=Fan Kaiyi wrote:}{quote} > the error is 'unknown soapaction"http://namedspace/AddEmp"' AddEmp is a...

How t o Get Revocation Date From Certificate Revocation List(CRL) using .NET2.0
Dear all,  I want check certificate against Revocation. This is the code i have written in my application it is  checking the Certificate against Revocation if it is revoked its giving status is Revoked but I want Revocation Date to Display when its Revoked X509Chain chain = new X509Chain(); chain.ChainPolicy.RevocationFlag = X509RevocationFlag.EntireChain; chain.ChainPolicy.RevocationMode = X509RevocationMode.Online | X509RevocationMode.Offline; chain.ChainPolicy.UrlRetrievalTimeout = new TimeSpan(0, 0, 30); chain.ChainPolicy.VerificationFl...

Transaction's and returning error's
Hi All I went through this tutorial http://www.asp.net/LEARN/data-access/tutorial-63-vb.aspx and I have it working quite well for me now,  But what I would like to do now is Return a confirmation message on each successful row update Retund a descriptive error message on failuers.  Can you help please. ThanxA user needs the administrative password like nitro-glycerine needs a good shake Hi Vexander, I think you can use a return value to indicate whether it's a successful operation. You have to follow these steps: 1) Return a value in BLL's method w...

TLS: error: the certificate '/etc/openldap/certs/xxx.crt' could not be found in the database
I was told by the Chief Architect, OpenLDAP the following: "This has nothing to do with OpenLDAP. Your build is using the MozNSS=20 crypto library, ask them for help." So, here is my setup - I've recently updated both my openldap servers to 2.4.39 version and=20 everything seems to be working EXCEPT the mirror synchronization which=20 was the issue I had previously with 2.4.23 Running on CentOS 6.5 Setup - Server1(provider): ldap-east.xxxxx.net Server2(consumer): ldap-west.xxxxx.net Not using self signed certs. Instead have a SAN(Subject Alternativ...

Bug 801266 Add label for Error Console's filter box
If you look at an Aurora SeaMonkey nightly you will notice that the Error Console's filter box is currently using Firefox's access key, which may or may not conflict with the menu bar. If you look at a trunk nightly you will see that the accesskey specified in consoleOverlay.dtd is working again. I hope to get the mozilla-central change uplifted to mozilla-aurora. However the problem arises that accesskey may not actually be present in the label. Certainly this affects the en-US locale because I happened to choose K as the access key. This means that I need to write a...

Web resources about - CRL import error: Issuer's V2 Certificate Revocation List has an unknown critical extension. - mozilla.dev.tech.crypto

Resources last updated: 1/8/2016 9:55:21 AM