You are viewing a plain text version of this content. The canonical link for it is here.
Posted to httpclient-users@hc.apache.org by David Motes <da...@gmail.com> on 2008/02/04 16:45:08 UTC
https to server with GoDaddy cert fails
Hi,
I am trying to use the GetMethod from version 3.1 to connect to our
server using ssl and am getting this error
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target
This is not a self-signed or untrusted SSL certificate, it was issued
from Godaddy last week and works fine with IE.
Is there a way to get this to work?
Thanks
---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org
Re: https to server with GoDaddy cert fails
Posted by David Motes <da...@gmail.com>.
I am using 1.5 which does not seem to have the right certs.
The software will be distributed to end users who probably could not figure out
how to run keytool or mess with certs on their computers anyway.
I generated a keystore that works and am downloading it non-ssl and using
System.setProperty("javax.net.ssl.trustStore", keyFile );
seems to work fine..
Thanks for your input...
On 2/4/08, William Rose <wr...@zip-it.org> wrote:
> Hi David,
>
> I think the Starfield CA certificate that GoDaddy issues under is not in
> JDK 1.4, but is in JDK 1.5. So you can also copy the official cacerts
> file (in jre/lib/security I think) from a 1.5 JRE and see if that makes
> things better (has for me previously). GoDaddy also use intermediate
> certificates, so make sure your server is set up to send them (though I
> think even IE complains if this is not right).
>
> cheers,
> will
>
> David Motes wrote:
> > Hi,
> >
> > I am trying to use the GetMethod from version 3.1 to connect to our
> > server using ssl and am getting this error
> >
> > sun.security.validator.ValidatorException: PKIX path building failed:
> > sun.security.provider.certpath.SunCertPathBuilderException:
> > unable to find valid certification path to requested target
> >
> > This is not a self-signed or untrusted SSL certificate, it was issued
> > from Godaddy last week and works fine with IE.
> >
> > Is there a way to get this to work?
> >
> > Thanks
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
> > For additional commands, e-mail: httpclient-users-help@hc.apache.org
> >
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
> For additional commands, e-mail: httpclient-users-help@hc.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org
Re: https to server with GoDaddy cert fails
Posted by William Rose <wr...@zip-it.org>.
Hi David,
I think the Starfield CA certificate that GoDaddy issues under is not in
JDK 1.4, but is in JDK 1.5. So you can also copy the official cacerts
file (in jre/lib/security I think) from a 1.5 JRE and see if that makes
things better (has for me previously). GoDaddy also use intermediate
certificates, so make sure your server is set up to send them (though I
think even IE complains if this is not right).
cheers,
will
David Motes wrote:
> Hi,
>
> I am trying to use the GetMethod from version 3.1 to connect to our
> server using ssl and am getting this error
>
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException:
> unable to find valid certification path to requested target
>
> This is not a self-signed or untrusted SSL certificate, it was issued
> from Godaddy last week and works fine with IE.
>
> Is there a way to get this to work?
>
> Thanks
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
> For additional commands, e-mail: httpclient-users-help@hc.apache.org
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org