Take the 2-minute tour ×
Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It's 100% free, no registration required.

I'm building an integration to a third party webservice, and wanted to implement Two Way SSL Certificates based on this article

We started out using Digicert certificates, but after many hours of investigation by the network team, it seems Salesforces does not have the necessary root and/or intermediate certificates in their keystore to support the Digicert certificates.

Once we switched to Verisign Certificates, it worked just fine.

If you end up here, hopefully our experience will lessen the injuries caused by banding your head on a table...unless someone else has been able to use Digicert?

share|improve this question
    
I think I bumped into a similar problem many moons ago - Experian root certs werent supported (only Root CA's trusted in the Java Keystore work) –  techtrekker Feb 20 '13 at 23:44

2 Answers 2

The most complete list of trusted certificates that I'm aware of is here. It appears that at least some Digicert certificates are supported. Were your certificates any of the following?

digicertassuredidrootca
digicertglobalrootca
digicerthighassuranceevrootca

share|improve this answer

I know Salesforce supports at least some of the digicert root certificates as I have implemented this in production. I have blogged a 5-part article series on setting up two-way SSL authentication with Salesforce and you can find it here. Though this article deals with Salesforce and IBM Websphere Cast Iron, the technique and most of the steps applies to any other technology stack as well. Check it out to see if that helps.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.