You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@commons.apache.org by "L. Yeung" <l_...@yahoo.com> on 2004/12/30 02:44:22 UTC

HttpClient Certificate Problem

Hi! I tried writing a simple httpclient executing a
simple getmethod on a url and throws this exception:

javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException:
No trusted certificate found
        at
com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.SunJSSE_az.a(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.SunJSSE_az.a(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.AppOutputStream.write(Unknown
Source)
        at
org.apache.commons.httpclient.HttpConnection$WrappedOutputStream.writ
e(HttpConnection.java:1368)
        at
java.io.BufferedOutputStream.flushBuffer(Unknown
Source)
        at java.io.BufferedOutputStream.flush(Unknown
Source)
        at
org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream
(HttpConnection.java:799)
        at
org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodB
ase.java:2277)
        at
org.apache.commons.httpclient.HttpMethodBase.processRequest(HttpMetho
dBase.java:2657)
        at
org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.j
ava:1093)
        at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.jav
a:675)
        at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.jav
a:529)
        at Peek.start(Peek.java:28)
        at Peek.main(Peek.java:46)
Caused by: sun.security.validator.ValidatorException:
No trusted certificate fou
nd
        at
sun.security.validator.SimpleValidator.buildTrustedChain(Unknown
Sour
ce)
        at
sun.security.validator.SimpleValidator.engineValidate(Unknown
Source)

        at
sun.security.validator.Validator.validate(Unknown
Source)
        at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(
Unknown Source)
        at
com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(
Unknown Source)
        ... 18 more

Thanks.
-len

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-user-help@jakarta.apache.org


Re: HttpClient Certificate Problem

Posted by Kedar Panse <ke...@bancbridge.com>.
Looking at the error 2 options come to mind...
1. Try using EasySSLFactory and implement your own trustmanager which 
trusts all the certificates which implements  X509TrustManager
2. Export certificate from IE  DER encoded and import in to the default 
keystore using import command

Kedar


L. Yeung wrote:

>I'm using jdk1.4.2_03. The site i'm trying to connect
>non-local server. I fired up firefox and the site
>displayed well (https://blah.com/whatever). 
>
>Thanks.
>
>-len
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around 
>http://mail.yahoo.com 
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: commons-user-help@jakarta.apache.org
>
>
>
>.
>
>  
>


---------------------------------------------------------------------
To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-user-help@jakarta.apache.org


Re: HttpClient Certificate Problem

Posted by Eric Renouf <er...@skaion.com>.
Have you perhaps already told firefox to accpet that certificate?  When I follow
that link in firefox it opens a dialog warning me about the certificate and
asking if I want to accept it.

Eric

Quoting "L. Yeung" <l_...@yahoo.com>:

> I'm using jdk1.4.2_03. The site i'm trying to connect
> non-local server. I fired up firefox and the site
> displayed well (https://blah.com/whatever). 
> 
> Thanks.
> 
> -len
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: commons-user-help@jakarta.apache.org
> 



___________________________________________________________
This mail sent using ToadMail -- Web based e-mail @ ToadNet

---------------------------------------------------------------------
To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-user-help@jakarta.apache.org


Re: HttpClient Certificate Problem

Posted by "L. Yeung" <l_...@yahoo.com>.
I'm using jdk1.4.2_03. The site i'm trying to connect
non-local server. I fired up firefox and the site
displayed well (https://blah.com/whatever). 

Thanks.

-len

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-user-help@jakarta.apache.org


Re: HttpClient Certificate Problem

Posted by Wade Chandler <wc...@redesetgrow.com>.
L. Yeung wrote:
> Hi! I tried writing a simple httpclient executing a
> simple getmethod on a url and throws this exception:
> 
> javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException:
> No trusted certificate found
>         at
> com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.SunJSSE_az.a(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.SunJSSE_az.a(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.AppOutputStream.write(Unknown
> Source)
>         at
> org.apache.commons.httpclient.HttpConnection$WrappedOutputStream.writ
> e(HttpConnection.java:1368)
>         at
> java.io.BufferedOutputStream.flushBuffer(Unknown
> Source)
>         at java.io.BufferedOutputStream.flush(Unknown
> Source)
>         at
> org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream
> (HttpConnection.java:799)
>         at
> org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodB
> ase.java:2277)
>         at
> org.apache.commons.httpclient.HttpMethodBase.processRequest(HttpMetho
> dBase.java:2657)
>         at
> org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.j
> ava:1093)
>         at
> org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.jav
> a:675)
>         at
> org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.jav
> a:529)
>         at Peek.start(Peek.java:28)
>         at Peek.main(Peek.java:46)
> Caused by: sun.security.validator.ValidatorException:
> No trusted certificate fou
> nd
>         at
> sun.security.validator.SimpleValidator.buildTrustedChain(Unknown
> Sour
> ce)
>         at
> sun.security.validator.SimpleValidator.engineValidate(Unknown
> Source)
> 
>         at
> sun.security.validator.Validator.validate(Unknown
> Source)
>         at
> com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(
> Unknown Source)
>         at
> com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(
> Unknown Source)
>         ... 18 more
> 
> Thanks.
> -len
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: commons-user-help@jakarta.apache.org
> 
> 
> 
> 
What version of the java runtime are you using?  1.3 or 1.4.1?
This reminds me of those versions.  If not, then where did you get the 
certificate on the server you are connecting to?  Is it your own server?

Wade


-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.298 / Virus Database: 265.6.6 - Release Date: 12/28/2004



---------------------------------------------------------------------
To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-user-help@jakarta.apache.org