Java Security

Firstly...I have no problem creating a ca, ca-signed server/user certs, and getting apache, ie/ns, or outlook to work with them. I thought I was doing pretty good for a while...

Java is screwing me though.

I recently switched from a self-signed ldapserver cert to a servercert signed by my self-signed ca. My java-ssl ldap browser apps now won't work. They mention I must import the server cert using keytool.

Well...I have imported my ca.crt into cacerts using keytool so my self-signed ca would be authorized.

Yet the apps still don't work. Specifically the ldap browser by Gawor states:

"CA certificate is not in the server certificate chain. Please use the keytool command to import the server certificate".

Bull...I have verified that my ca.crt is listed along with verisign and others in cacerts. Additoinally I have imported my ca.crt into my local keystore and even the cert specifically for the ldap server....nothing works.

Any help would be appreciated....