Why I avoid ever dealing with vendors if at all possible.

[reddragdiva]

iPlanet 4.0 being shit and Sun ONE Web Server 6.1 also being shit, you can't pr0t SSL certificates from one to the other, whatever the migration manual alleges.

So I called Verisign for advice.

"Revoke and renew and pay a hundred quid per cert if you can't port."
Fine. How do I do that? Your web page does not appear to, ahhh, work. (I even looked at the source and couldn't see how it could work, let alone what the proper link might be.)
"Ah, you'll need your administrator for that. That's [NAME OF GUY TWO SEATS OVER LISTED AS TECH CONTACT]."
I am of course the administrator. I control the horizontal, I control the vertical and I'm calling you because it's my problem.
"Ah, please hold. (two minutes) OK, contact your administrator and he will tell you the web page you need to go to in iPlanet admin console."
I am the administrator, and I have the admin console page open in front of me.
"Ah, please hold. (three minutes) OK, go to [TAB WHICH DOESN'T EXIST]."
That tab doesn't exist in iPlanet 4.0sp4.
"Ah, please hold. (ten minutes) OK, go to this web address."
This works and I revoke and renew. THANK YOU FOR BOTHERING TO DO SOME WORK ON SUCH A FINE DAY.

I fully support the principle of "if I wanted to work I'd get a job." But not when I want them to do work for ME.

Comments

[poggs.livejournal.com]

Y'see, I prefer to make all X.509 certificates and keyrings with command-line tools so I /know/ I have the keys to hand.

[grumpy-sysadmin.livejournal.com]

That works shiny and well with non-commercial software, and if you were the one who set things up originally. You'll note that neither of these things are true in the specific example at hand here.

[ronebofh.livejournal.com]

Veri$lime delenda est.

[reddragdiva]

http://www.verislime.com/ is a domain hoarder page, but is somewhat amusing in context.