Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Adobe AIR - Unable to build a valid certificate chain for the signer

I purchased a p12 certificate but am having difficulty using it. I always get the following error when trying to sign my app:

Error creating AIR file: Unable to build a valid certificate chain for the signer.

screenshot

This is not an issue when I sign the app with a self-signed certificate.

I'm trying to sign a .air file for the desktop. I'm on Mac OSX. Is there anything I must do before using the p12 file?

I have previously (2 years back) purchased a p12 key from the same provider and that one did not have any issue. That key has expired now though.

like image 979
Yeti Avatar asked Jul 07 '12 06:07

Yeti


People also ask

What is an intermediate certificate?

An intermediate certificate works as a substitute of a root certificate because root certificate has its own security layers assuring that its keys remain unobtainable. Intermediate certificate plays a “Chain of Trust” between an end entity certificate and a root certificate.

Why use intermediate certificates?

Why Is the Intermediate Certificate Authority Important? The idea behind the Intermediate CA certificates is to add an extra layer of protection. This higher level of protection is achieved by not having to use the Root CA certificate to issue certificates for end-users.


1 Answers

After looking around I was able to generate a new P12 certificate which works. Yay!

The last answer in this Adobe forum worked:

http://forums.adobe.com/message/1975832#1975832

Here are the steps listed on the forum:

  1. I get the certificate cert-client.p12 from my client
  2. Double click and install the certificate from the windows explorer
  3. Open Internetexplorer > Tools > Internet Options > Content > Certificates
  4. Select the certificate which have previously imported and click export
  5. Next
  6. Yes, export the private key
  7. Format: PKCS, (checked) Include all certificates in the... , (checked) Enable Strong protection, (unchecked) Delete the private key ...
  8. Next
  9. Enter Password for the certificate
  10. Next enter filename and export the file
  11. Rename the file to pk12
like image 196
Yeti Avatar answered Sep 27 '22 19:09

Yeti