SSL issue - windows CA - importing into JBoss 4.2.1

[CarmenLC]

Afternoon,

I am trying to import a Windows generated certificate. I go through the process Adobe has documented to create the keystore and then the CSR. I send this CSR to the internal network team to create a certificate. Once I get this cert back I follow the Adobe documented steps to import.  The import process complains showing the following error in the dos prompt.

Unparseable CRLDistributionPoints extension due to
java.io.IOException: invalid URI name:file://\\servername\CertEnroll\XXXXXXX In.crl

I can also see this message in the keystore when viewing it. ("keytool -list -v -keystore name.keystore")

I am 'guessing' this is related to the space right after the XXXXXX in the error above.

Will JBoss cough on this space?

Any alternatives?

Has anyone else experienced this?

Thanks,

Carmen

[kapss]

File URL and UNC do not work togeather in Java till Java 1.7. Hence I assume that JBoss would not be able to understand the CRL URL.

Are you using this for SSL communication? In that case, even if you migrate to Java 7, the clients would require the access to the shared file system to validate the server certificate.

I think your best bet is to use a http server to host the CRLs.