🚀 go-pugleaf

On 2007-09-30, Per R�nne <per@RQNNE.invalid> wrote:
> I am using a digital certificate to access government sites in
> Denmark.  The certificate is, however, only valid for two years so
> then you will have to get a new certificate.

Not to stray too far off topic, but are you talking about regular
government services for ordinary citizens?  That is to day, does
Denmark issue its citizens X.509 certificates for secure
authentication to government Web sites?  Because that sounds really
nifty if it is the case.

> Of course, this is what I have done. And I have placed the new
> certificate in my keyring [through
> /Applications/Utilities/Keychain Access].
>
> But Safari still uses the old certificate which is now obsolete.
> It doesn't even help to delete it from the keyring; it is till
> chosen by Safari. And though it shows two certificates [and marks
> the first one as no more valid], it still uses it - and I see no
> way to force it to use the new.

Sorry, I'm a little unclear on what you mean there.  Do you keep
deleting your expired certificate from your login keychain, only to
have it reappear later?  Maybe it would help to clarify this if you
could post a screenshot somewhere.

> I have successfully removed the obsolete certificate from FireFox
> and it works as it should. But not so with Safari.

This is just a wild guess, but were you given a new private key when
you were issued the new certificate?  If so, did you explicitly
delete the obsolete private key from the keychain along with its
expired certificate?

-- 
Mark Shroyer
http://markshroyer.com/