So here’s the problem du jour.
I have a new X.509 certificate from Verisign, this nice, reputable Certificate Authority.
I created a new keyring to request this certificate originally, but when I go to add the Intermediate Certificate (aka the Server Certificate Chain), I get an error that “Certificate key is already in key ring”.
Well, I can see the case for this. Verisign is a well known CA, it makes sense that vendors like IBM and Microsoft would as a matter of course include the Intermediate cert in their software distributions (i.e. Notes/Domino and Windows).
So if I skip this step, and go right to adding the server’s new X.509 certificate to the new key ring file, I get an error that this is a “Unrecognized Certificate Authority signature”
I’m stumped. What the h-e-double-toothpicks is going on??