Demo certificates expire in RSA Mobile 1.5
2 years ago
Originally Published: 2004-05-14
Article Number
000061701
Applies To
RSA Mobile 1.5
RSA Mobile 1.5 Authentication Server
BEA WebLogic 6.1
Microsoft Windows 2000 Advanced Server SP4
Issue
Demo certificates expire in RSA Mobile 1.5
SSL not working with RSA Mobile
Expired certificates
If you are using the default SSL certificates within RSA Mobile (e.g. you have not yet enrolled for your own certificates following details in the Planning, Deployment, and Installation Guide, page 54), then you will not be able to log on to the admin GUI. It will show an unavailable page.
<Alert> <WebLogicServer> <Inconsistent security configuration, java.lang.Exception: Problem with X509 certificate: fingerprint = 56b7dfac29e39c21027973c248d8c1bb, not before = Wed May 31 07:38:01 EST 2000, not after =Fri May 14 07:38:01 EST 2004,
Cause
The RSA Mobile system runs using a WebLogic 6.1 application server, on initial installation the system has demonstration certificates to show how SSL may be used. These demonstration certificates expired on May 14, 2004 so the demonstration SSL facilities are not available.
Resolution
The steps outlined in the section "Configuring SSL" of the Planning, Deployment, and Installation Guide, page 54 should be followed to ensure that a system does not attempt to use the demonstration certificates.

If the system is not yet live, then replacement demonstration certificates (and private key files) are available upon request from RSA Security Customer Support. A file called weblogic7certs.zip is supplied; this can then be unpacked into the /bea/wlserver/config/csfdomain directory overwriting the originals with the same names. This step should be taken after installing RSA Mobile, but before running any of the "configtool" commands.

NOTE: Additional information regarding the demo certificates supplied in the system may be found at http://dev2dev.bea.com/products/wlserver81/wls_demo_cas.jsp
Workaround
The system was working sometime before May 14, 2004