Which OCA Certificate to install as Trusted Certificate on all browsers
turnerpeJan 25 2010 — edited Jan 26 2010I have an SSL enabled Oracle Application Server 10g (10.1.2.3) . The server and CA certificates were created using the Oracle Certificate Authority (OCA) utility. I deployed a web service application and tested from my desktop and the page renders successfully from my browser in SSL and I am able to view the server certificate, issuer and date.
However, when a co-worker tries to access the web service URL, the IE7 client browser produces a certificate error. I presume this is because the OCA CA certificate is not listed among the Trusted Root Certification Authorities. I found a thread in OTN that is related to this issue and it suggests updating IE using group policy to send the certificates.
The question is which certificate(s) to install in IE:
A) The OCA approved server certificate (name=cdmserver2)
B) The OCA CA/issuer certificate (name= Oracle Certificate Authority II)
C) Both A and B
Thanks,
Pat