CA Certificate bundled with v2.1.1 has expired.

Description

The CA certificate bundled with Sun GlassFish Enterprise Server v2.1.1 has expired since Jan 08, 2010. Hence some SEVERE messages may be observed while starting the domain.

Solution

Remove the expired certificate from the keystore. To remove the certificate from the JKS keystore, use the following command,

keytool delete -alias verisignserverca -keystore domain-dir/config/cacerts.jks

To remove the certificate from the NSS keystore, use the following command,

certutil -D -n verisignserverca -d domain-dir/config