Creating SSL connections from an application

[Markus Wolf <ma...@emedia-solutions-wolf.de>]

Hi Newsgroup :)

I'm new to Geronimo and JEE at all.
I have a problem creating a SSL socket from my application.
I recieve this exception (part of it):

Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
        at
com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerPrincipal(SSLSessionImpl.java:464)
        at
de.knipp.rritoolkit.tcp.TcpChannelFactory.verifyServerName(TcpChannelFactory.java:198)

When I deploy this into Tomcat then everything works as expected, but in
Geronimo there seem to be a problem with the keystore or SSL
implementation. Can anybody give me a good hint where to look at?

Regards
Markus Wolf
-- 
>
> emedia-solutions wolf
> Wedeler Landstrasse 63
> 22559 Hamburg
> (040) 550 083 70
>
>>  web: http://www.emedia-solutions-wolf.de
>> mail: markus@emedia-solutions-wolf.de
>>  pgp: http://wwwkeys.de.pgp.net
>

Re: Creating SSL connections from an application

[Markus Wolf <ma...@emedia-solutions-wolf.de>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> I have a problem creating a SSL socket from my application.
> I recieve this exception (part of it):
> 
> Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
>         at
> com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerPrincipal(SSLSessionImpl.java:464)
>         at
> de.knipp.rritoolkit.tcp.TcpChannelFactory.verifyServerName(TcpChannelFactory.java:198)
> 
> When I deploy this into Tomcat then everything works as expected, but in
> Geronimo there seem to be a problem with the keystore or SSL
> implementation. Can anybody give me a good hint where to look at?
> 
I've found a solution to this (using the cacerts as trustStore for
Ggeronimo).
This rises another question:
Is it possible to give a trustStore/keyStore with the application (EAR)
to Geronimo which is used in turn by the application for SSL?

Thanks
Markus Wolf
- --
>
> emedia-solutions wolf
> Wedeler Landstrasse 63
> 22559 Hamburg
> (040) 550 083 70
>
>>  web: http://www.emedia-solutions-wolf.de
>> mail: markus@emedia-solutions-wolf.de
>>  pgp: http://wwwkeys.de.pgp.net
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEiYbweyJE91ndMG4RAvHDAJ9dTlkNHqhfcnRKYgMFUJplmEB1pwCfZAKy
vx9LECRH3fKeGuKq4CmGizs=
=YAk8
-----END PGP SIGNATURE-----