I've done this and works fine with my Java client.

While importing the expired certificate, keytool gave me a warning stating that "This 
certificate is expired still do u want to use it?", I've typed Yes and it added the 
certificate to the local store.

Here are the steps I've used:

--> cert.store file will be created
keytool -genkey -alias webserv1 -keypass password -storepass password -keystore 
cert.store

--> webserv1.cer is the certificate file from the browser 
(u can get certificate file from the browser by right 
click->properties->certificates->details->copy to file)
keytool -v -import -trustcacerts -alias webserv1 -file webserv1.cer -keystore 
cert.store -keypass password -storepass password
[keytool will give warning here]

-----Original Message-----
From: Sean Leblanc [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 14, 2003 5:16 PM
To: '[EMAIL PROTECTED]'
Subject: Axis over SSL when certificate is not valid?


Hi,

Does anyone know how to make Axis work over SSL even when the (server) cert
is not valid?

I've tried writing my own HostVerifier, and also my own version of
X509TrustManager, but neither worked. Is this possible to do, and if so,
does anyone have a working example?


Thanks,
Sean LeBlanc

Reply via email to