pfx certificate chain problem



Hi

I have .spc and .pvk files from Thawte for our digital certificate and
I'm currently working on making an application that will install a
ClickOnce deployment of one of our products on a client's server.

I used pvk2pfx.exe to create a pfx file to use for signing with
mage.exe.

Everything works fine except when using mage.exe I update the
providerUrl, so that it will load from the server the client wants to
run from, this works fine.

But when i do "mage.exe -Sign MyProgram.application -CertFile
myCert.pfx -Password ******"

it works perfectly fine on my system, but when I run it on any other
system it gives me:
"Internal error, please try again. An internal certificate chaining
error has occurred."

The tree goes from our certifcate to:
Thawte Code Signing CA... and the root is... Thawte Premium Server
CA...

The thing is both these parents of our certificate are in the other
machines certificate store... so I don't understand why its giving me
this error, its not exactly like Thawte aren't trusted on machines...

I've tried this on Win 2000 SP4 and Win XP SP2 machines...

any ideas? I tried importing the certificate into my store then
exporting it again as pfx and not include all certificates in the
path... but this still doesn't work.

thanks for any help
Kris Wragg

.



Relevant Pages

  • Re: Thawte Digital Certificate Revocation List Issue
    ... > I am new to digital certificates and cannot get the Thawte certificate ... It's been awhile since I played with the Thawte certificates. ... Microsoft requires the cert ... CRL so Outlook doesn't know where to get ...
    (microsoft.public.security)
  • SSL server created request not working
    ... I have aSBS 2003 R2 Standard server i just rebuilt the OS. ... our SSL 123 cert from Thawte and ran into a wierd problem. ... server certificate button, ...
    (microsoft.public.windows.server.sbs)
  • ssl server cert reqeust not working
    ... I have aSBS 2003 R2 Standard server i just rebuilt the OS. ... our SSL 123 cert from Thawte and ran into a wierd problem. ... server certificate button, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Harassment by SSL Provider?
    ... > this may be a ploy by Thawte to generate additional business. ... If they were sending you an email about an SSL certificate acquired ... It is *very* important to renew your SSL certificate if you are going to ...
    (Security-Basics)
  • Re: How to install 3rd party SSL domain ceritificate on local serv
    ... certificate request on your server and send it to Thawte. ... Assuming that they are reselling you a Thawte certificate, ...
    (microsoft.public.windows.server.general)