Red Hat Knowledgebase

Resolution:

Red Hat Certificate Server requires updated JVM to include the DST changes. Since Red Hat Certificate System bundles it's own JVM, some additional steps are required.

For Certificate System 7.1:

1. For both Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4 make sure the system is upgraded to the latest update through Red Hat Network (RHN). Fixes are specifically in the tzdata package.
2. For updating the IBM JRE , thats installed along-with the Certificate System installation package, follow these steps:
   1. Shutdown all CS servers.
   2. Download IBM JRE 1.4.2 SR7 ( the latest as of this writing ) to a temp directory in a tarball format.
   3. Unpack this tarball to /newjre
   4. Backup the previous JRE version. For example:

      # mv /opt/redhat-cs/bin/base/jre/ /opt/redhat-cs/bin/base/jre.old/
      # mv /opt/redhat-cs/bin/cert/jre/ /opt/redhat-cs/bin/cert/jre.old/
      

   5. Create a soft link of the new JRE in the Certifitate system directory.

      ln -s /newjre/jre/ /opt/redhat-cs/bin/base/
      ln -s /newjre/jre/ /opt/redhat-cs/bin/cert/
      

   6. Copy the crimson.jar,xalan.jar and jakarta-naming.jar from the backed up JRE directory to the new one.

      # cp /opt/redhat-cs/bin/cert/jre.old/lib/ext/crimson.jar /newjre/jre/lib/ext/
      # cp /opt/redhat-cs/bin/cert/jre.old/lib/ext/xalan.jar /newjre/jre/lib/ext/
      # cp /opt/redhat-cs/bin/cert/jre.old/lib/ext/jakarta-naming.jar /newjre/jre/lib/ext/
      

   7. Restart Certificate System Servers now.

For Certificate System 7.2:

1. For both Red Hat Enterprise Linux 4 32bit and 64bit, make sure the system is upgraded to the latest update through RHN. Fixes are specifically in the tzdata package.
2. For updating the IBM JRE 1.5, upgrade to java-1.5.0-ibm-1.5.0.3-1jpp.3.el4