Signed Patches Administration Guide for PatchPro 2.2

Troubleshooting Problems With Netscape Security Tools

This section describes how to troubleshoot problems using signed patches with Netscape tools.

If you need to verify a signed patch, use the following command:


# signtool -v patch-ID.jar

Problem or Error Message 

Explanation 

Solution 

Cannot import Sun certificate chain from https://ra.sun.com:110005 to the Netscape cert database

Self-explanatory. 

Make sure that the GTE CyberTrust Root CA was deleted before importing the certificate chain. For more information, see How to Import the Sun Certificates With Netscape 4.7 Tools.

signtool: No certificate database in keystore-location

signtool: Check the -d arguments that you gave

Either the certificate is not in the keystore, the keystore is not accessible, or the arguments are incorrect. 

Make sure that the argument is correct and that the keystore is accessible. Use Netscape->Security->Signers to check if all three CAs are present: GTE CyberTrust Root CA, Sun Microsystems Inc CA (Class B) - Sun Microsystems Inc, Sun Microsystems Inc Root CA - GTE Corporation. If the certificates are not in the Netscape keystore, import the certificate chain from https://ra.sun.com:11005.

Cannot install sign patches  

It is possible that signed patches cannot be installed due to lack of space. 

Make sure that there is enough disk space.