Comodo secure email certificate

Thanks Martijn,

Comodo root and intermediate were included in the p7b's of your site.
After importing them into the root and certificates store the warning message disappeared.
The CA column still shows "false", I've already tried to delete and import the (end-user) certficate again
but it still shows "false".
Is CA "false" correct for end-user certificates ?

Thanks,

Perry

···

----------------------------------------------------------------------

Message: 1
Date: Wed, 25 Apr 2012 08:43:51 +0200 (CEST)
From: Perry Peeters <p.peeters(a)deonet.nl>
Subject: Comodo secure email certificate
To: users(a)lists.djigzo.com
Message-ID: <617d4b17-93a7-46eb-acb6-c724b8552dea(a)deolinux1>
Content-Type: text/plain; charset=utf-8

After buying a secure email certificate from Comodo I imported the certificate
into Djigzo.
The certficate shows up with the following message in the Info column:
"Error building certPath. No issuer ce..."
Also CA shows "false"
What caused this and how can we get this resolved ?

------------------------------

Message: 2
Date: Wed, 25 Apr 2012 08:52:52 +0200
From: Martijn Brinkers <martijn(a)djigzo.com>
Subject: Re: Comodo secure email certificate
To: users(a)lists.djigzo.com
Message-ID: <4F979F44.1060903(a)djigzo.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

On 04/25/2012 08:43 AM, Perry Peeters wrote:

After buying a secure email certificate from Comodo I imported the certificate
into Djigzo.
The certficate shows up with the following message in the Info column:
"Error building certPath. No issuer ce..."
Also CA shows "false"
What caused this and how can we get this resolved ?

Did you install the Comodo root and intermediate certificate? The
warning "no issuer cert.." is shown if the certificate chain (i.e., the
trust chain from certificate to a trusted root) is not complete. You can
import the p7b files with some roots and intermediate certificates from
http://www.djigzo.com/downloads.html (see certificates). The
intermediates need to be imported into the certificates store and the
roots into the root store. I'm not sure whether the Comodo root and
intermediate certificate(s) are included with the p7b's though.
Alternatively you can export the chain from the system on which the
Comodo certificate is stored and import the chain into DJIGZO.

Kind regards,

Martijn Brinkers

------------------------------

_______________________________________________
Users mailing list
Users(a)lists.djigzo.com
http://lists.djigzo.com/lists/listinfo/users

End of Users Digest, Vol 35, Issue 7
************************************

Zitat von Perry Peeters <p.peeters(a)deonet.nl>:

Thanks Martijn,

Comodo root and intermediate were included in the p7b's of your site.
After importing them into the root and certificates store the
warning message disappeared.
The CA column still shows "false", I've already tried to delete and
import the (end-user) certficate again
but it still shows "false".
Is CA "false" correct for end-user certificates ?

Yes, because end-user certificates are indeed not a root-CA.

Regards

Andreas

Can you send me your Comodo certificate (i.e., the .cer file) privately
(to martijn(a)djigzo.com). It might be that Comodo is using a different
intermediate certificate now which is not included with the provided
.p7b from the website.

Kind regards,

Martijn Brinkers

···

On 04/25/2012 12:41 PM, Perry Peeters wrote:

Thanks Martijn,

Comodo root and intermediate were included in the p7b's of your site.
After importing them into the root and certificates store the warning message disappeared.
The CA column still shows "false", I've already tried to delete and import the (end-user) certficate again
but it still shows "false".
Is CA "false" correct for end-user certificates ?

Zitat von Martijn Brinkers <martijn(a)djigzo.com>:

···

On 04/25/2012 12:41 PM, Perry Peeters wrote:

Thanks Martijn,

Comodo root and intermediate were included in the p7b's of your site.
After importing them into the root and certificates store the
warning message disappeared.
The CA column still shows "false", I've already tried to delete and
import the (end-user) certficate again
but it still shows "false".
Is CA "false" correct for end-user certificates ?

Can you send me your Comodo certificate (i.e., the .cer file) privately
(to martijn(a)djigzo.com). It might be that Comodo is using a different
intermediate certificate now which is not included with the provided
.p7b from the website.

Correct me if i'm wrong but the CA column should be "false" for
end-user certificates in the certificates panel, no? Only in the root
panel the CA should be true??

Regards

Andreas

An intermediate certificate is also a CA so intermediate certificates
also have CA column to be true. End-user certificates should always have
CA to be false.

Kind regards,

Martijn Brinkers

···

On 01/-10/-28163 08:59 PM, lst_hoe02(a)kwsoft.de wrote:

Zitat von Martijn Brinkers <martijn(a)djigzo.com>:

On 04/25/2012 12:41 PM, Perry Peeters wrote:

Thanks Martijn,

Comodo root and intermediate were included in the p7b's of your site.
After importing them into the root and certificates store the warning
message disappeared.
The CA column still shows "false", I've already tried to delete and
import the (end-user) certficate again
but it still shows "false".
Is CA "false" correct for end-user certificates ?

Can you send me your Comodo certificate (i.e., the .cer file) privately
(to martijn(a)djigzo.com). It might be that Comodo is using a different
intermediate certificate now which is not included with the provided
.p7b from the website.

Correct me if i'm wrong but the CA column should be "false" for end-user
certificates in the certificates panel, no? Only in the root panel the
CA should be true??

Zitat von Martijn Brinkers <martijn(a)djigzo.com>:

···

On 01/-10/-28163 08:59 PM, lst_hoe02(a)kwsoft.de wrote:

Zitat von Martijn Brinkers <martijn(a)djigzo.com>:

On 04/25/2012 12:41 PM, Perry Peeters wrote:

Thanks Martijn,

Comodo root and intermediate were included in the p7b's of your site.
After importing them into the root and certificates store the warning
message disappeared.
The CA column still shows "false", I've already tried to delete and
import the (end-user) certficate again
but it still shows "false".
Is CA "false" correct for end-user certificates ?

Can you send me your Comodo certificate (i.e., the .cer file) privately
(to martijn(a)djigzo.com). It might be that Comodo is using a different
intermediate certificate now which is not included with the provided
.p7b from the website.

Correct me if i'm wrong but the CA column should be "false" for end-user
certificates in the certificates panel, no? Only in the root panel the
CA should be true??

An intermediate certificate is also a CA so intermediate certificates
also have CA column to be true. End-user certificates should always have
CA to be false.

My impression was, that the question of the OP was about end-user
certificate and not the intermediate, but i have not closely monitored
the thread.

Regards

Andreas

You were right. The question was about an end-user certificate and and
end-user certificate should never have CA true. I just wanted to add
some extra information that some certificates (namely intermediate
certificates) in the certificate store can have CA true.

Kind regards,

Martijn Brinkers

···

On 01/-10/-28163 08:59 PM, lst_hoe02(a)kwsoft.de wrote:

Zitat von Martijn Brinkers <martijn(a)djigzo.com>:

On 01/-10/-28163 08:59 PM, lst_hoe02(a)kwsoft.de wrote:

Zitat von Martijn Brinkers <martijn(a)djigzo.com>:

On 04/25/2012 12:41 PM, Perry Peeters wrote:

Thanks Martijn,

Comodo root and intermediate were included in the p7b's of your site.
After importing them into the root and certificates store the warning
message disappeared.
The CA column still shows "false", I've already tried to delete and
import the (end-user) certficate again
but it still shows "false".
Is CA "false" correct for end-user certificates ?

Can you send me your Comodo certificate (i.e., the .cer file) privately
(to martijn(a)djigzo.com). It might be that Comodo is using a different
intermediate certificate now which is not included with the provided
.p7b from the website.

Correct me if i'm wrong but the CA column should be "false" for end-user
certificates in the certificates panel, no? Only in the root panel the
CA should be true??

An intermediate certificate is also a CA so intermediate certificates
also have CA column to be true. End-user certificates should always have
CA to be false.

My impression was, that the question of the OP was about end-user
certificate and not the intermediate, but i have not closely monitored
the thread.

Thanks Martijn,

Comodo root and intermediate were included in the p7b's of your site.
After importing them into the root and certificates store the warning message disappeared.

You can download the Comodo intermediate certificate here

download the COMODOClientAuthenticationandSecureEmailCA certificate and
import it into the certificates store. Your end-user certificate should
then be trusted.

Kind regards,

Martijn Brinkers

···

On 04/25/2012 12:41 PM, Perry Peeters wrote:

----------------------------------------------------------------------

Message: 1
Date: Wed, 25 Apr 2012 08:43:51 +0200 (CEST)
From: Perry Peeters<p.peeters(a)deonet.nl>
Subject: Comodo secure email certificate
To: users(a)lists.djigzo.com
Message-ID:<617d4b17-93a7-46eb-acb6-c724b8552dea(a)deolinux1>
Content-Type: text/plain; charset=utf-8

After buying a secure email certificate from Comodo I imported the certificate
into Djigzo.
The certficate shows up with the following message in the Info column:
"Error building certPath. No issuer ce..."
Also CA shows "false"
What caused this and how can we get this resolved ?

------------------------------

Message: 2
Date: Wed, 25 Apr 2012 08:52:52 +0200
From: Martijn Brinkers<martijn(a)djigzo.com>
Subject: Re: Comodo secure email certificate
To: users(a)lists.djigzo.com
Message-ID:<4F979F44.1060903(a)djigzo.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

On 04/25/2012 08:43 AM, Perry Peeters wrote:

After buying a secure email certificate from Comodo I imported the certificate
into Djigzo.
The certficate shows up with the following message in the Info column:
"Error building certPath. No issuer ce..."
Also CA shows "false"
What caused this and how can we get this resolved ?

Did you install the Comodo root and intermediate certificate? The
warning "no issuer cert.." is shown if the certificate chain (i.e., the
trust chain from certificate to a trusted root) is not complete. You can
import the p7b files with some roots and intermediate certificates from
http://www.djigzo.com/downloads.html (see certificates). The
intermediates need to be imported into the certificates store and the
roots into the root store. I'm not sure whether the Comodo root and
intermediate certificate(s) are included with the p7b's though.
Alternatively you can export the chain from the system on which the
Comodo certificate is stored and import the chain into DJIGZO.

Kind regards,

Martijn Brinkers

------------------------------

_______________________________________________
Users mailing list
Users(a)lists.djigzo.com
http://lists.djigzo.com/lists/listinfo/users

End of Users Digest, Vol 35, Issue 7
************************************
_______________________________________________
Users mailing list
Users(a)lists.djigzo.com
http://lists.djigzo.com/lists/listinfo/users