Skip to content

Conversation

hdpe
Copy link

@hdpe hdpe commented Mar 26, 2019

This reverts a change made in 383fa7f where the Token CA was removed
from the trusted certs file, causing SSL handshake failure when TokenOS
attempts to contact the sample bank.

This reverts a change made in 383fa7f where the Token CA was removed
from the trusted certs file, causing SSL handshake failure when TokenOS
attempts to contact the sample bank.
@yuhan-token
Copy link
Contributor

Hi @hdpe , thanks for the PR. I have created #26 to add back the two intermediate CAs with comments.

The certificate you are adding here is the intermediate CA we use for production environment, so it shouldn't have fixed any connection issue for you in sandbox. Could you double check?

@hdpe
Copy link
Author

hdpe commented Mar 28, 2019

It's apparently also the intermediate cert for the sandbox environment.

As you can see by my screenshot, the CA for both prod and sandbox has CN "Token".

My PR reintroduces the cert with CN "Token" to the trusted-certs file. Without this, there is no cert with CN "Token" in the trusted-certs file, so any cert with CA "Token" will not be trusted!

certs

@hdpe
Copy link
Author

hdpe commented Mar 28, 2019

I have verified that the cert I added to trusted-certs in 2d5342a is indeed the same as the one that I've added to my trusted-certs to allow Sandbox to talk to our bank.

This is the same as the one you've labelled "Token Intermediate CA Production" in your PR in e15d0c7.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants