[Muscle] certificate error using DoD CAC with Firefox or Thunderbird

[Timothy J. Miller]

On Nov 25, 2007, at 3:14 PM, Kevin Reinholz wrote:

> I think there were 28 certs imported from those 3 chains in  
> Firefox, versus 32 in Internet Explorer.

The difference here is, IIRC, that Firefox doesn't import the  
*expired* issuing CAs (3 & 4, both email and ID).

The error you're seeing is usually a trust issue.  I'd nuke *all* the  
DoD certs and re-import them.  Make sure your set trust correctly.   
If it's working right you should be able to view one of your certs  
from your CAC and see the entire chain up to one of the DoD roots.

-- Tim

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2533 bytes
Desc: not available
Url : http://lists.drizzle.com/pipermail/muscle/attachments/20071128/11a9f4d6/smime.bin