[jira] [Commented] (CLEREZZA-519) Warnings serving some static content using HTTPS

["Reto Bachmann-Gmür (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CLEREZZA-519?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032362#comment-13032362 ] 

Reto Bachmann-Gmür commented on CLEREZZA-519:
---------------------------------------------

The reson for this is that it tries to get the the page-not found page via https from the own instance on the same virtual host (i.e. using the same hostname) as in the original request. The problem is that java complains because localhost has a self-signed certificate and refuses to get the content. A You can add the cert of localhost to the jvm (instruction son how to do this).

By adding a resource at /favicon.ico you could prevent mosts 404 and the related error above.

> Warnings serving some static content using HTTPS
> ------------------------------------------------
>
>                 Key: CLEREZZA-519
>                 URL: https://issues.apache.org/jira/browse/CLEREZZA-519
>             Project: Clerezza
>          Issue Type: Bug
>            Reporter: Sergio Fernandez
>            Priority: Minor
>              Labels: security
>         Attachments: clerezza-out.txt
>
>
> Trying clerezza using HTTPS, I notice that it raises many exceptions related with some static content, such as:
> zz>2011-05-12 12:59:00,656 [qtp30390269-39 - /favicon.ico]  WARN [qtp30390269-39 - /favicon.ico] (JDK14LoggerAdapter.java\:588) - Exception (with no exception mapper)
> java.security.PrivilegedActionException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
> (I'll also attach the full output produced)

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira