Major Java signing problem

Digital Certificates Code Signing Certificate
1

Hi,

I’ve been battling with this off and on for months now, problem is trying to get my comodo code cert installed into linux keystore and code sign jar files.

at some point i managed to get the cert into the keystore and it gives this on query:

Alias name: brilliant scm’s the usertrust network id
Creation date: Jul 6, 2008
Entry type: keyEntry
Certificate chain length: 2
Certificate[1]:
Owner: CN=Brilliant SCM, OU=NetBriller, O=Brilliant SCM, STREET=LLYS BRIALLEN, L=BRIDGEND, ST=MID GLAMORGAN, OID.2.5.4.17=CF31 4BG, C=GB
Issuer: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
Serial number: 42120be7f479264ee9238f3912158738
Valid from: Sat Jun 21 01:00:00 BST 2008 until: Mon Jun 22 00:59:59 BST 2009
Certificate fingerprints:
MD5: CB:B6:E7:38:91:D4:F5:5F:2E:E2:3C:55:69:33:98:B8
SHA1: 71:71:72:1D:73:9E:EB:20:E9:CB:B7:D8:70:40:C7:AC:AB:A7:94:80
Certificate[2]:
Owner: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
Issuer: CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
Serial number: 44be0c8b500024b411d3362de0b35f1b
Valid from: Fri Jul 09 19:31:20 BST 1999 until: Tue Jul 09 19:40:36 BST 2019
Certificate fingerprints:
MD5: A7:F2:E4:16:06:41:11:50:30:6B:9C:E3:B4:9C:B0:C9
SHA1: E1:2D:FB:4B:41:D7:D9:C3:2B:30:51:4B:AC:1D:81:D8:38:5E:2D:46

which all looks ok? and signing the jar with

jarsigner -signedjar sVMS_Config.jar VMS_Config.jar “brilliant scm’s the usertrust network id”

(lovely alias name) does give a runnable jar’d applet (netbriller.com) but it throws a security warning, cert not validated (image here netbriller.com) where the cert seems to bear no resemblance to either cert in the chain i signed it with!

this is driving me mad, and despite copious googling I can’t find a really good explanation of what’s going on with the whole import & sign process for Java.

If anyone can help with this I’ll do them a great deal on a pair of specs as thanks.

Thanks for reading

Mark

2

well i’ve finally got it sorted, only slight downside being I’m not exactly sure how, just redid what i thought i’d been doing correct again and it all looks good now, so “tentatively” problem sorted :slight_smile:

3

Thanks mjames85.

Let us know if there are any other problems.

Josh

4

mjames,

How did you managed to get it into the keystore? That’s the part I’m struggling with right now.

Thanks!
Liz