David,
You may want to take a different approach and provide a custom SSL trust
manager (which in its crudest and ugliest form may be programmed to
simply trust all target servers)

Take a look at the 'Customizing SSL in HttpClient' section of the
HttpClient SSL guide at the following location
<http://jakarta.apache.org/commons/httpclient/sslguide.html>

Hope this helps

Oleg

On Mon, 2004-01-05 at 22:47, David Webb wrote:
> I have written a simple Java application to call a URL using Jakarta 
> HttpClient.  The code works like a champ on my windows 2K development 
> workstation when accessing a URL the is protected by Siteminder (which 
> redirects to SSL for Authentication).  The big difference is that when I try to 
> run the same code on a HPUX box I get the following message...
> 
> javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: 
> CA certificate does not include basic constraints extension
> 
> I read some posts about Trusted CAs.  I used 'keytool' to create a keystore and 
> import the Root Certificate for the Trusted Authority and I start my JVM like 
> this...
> 
> keystore filename is cacerts
> keystore password is password
> 
> java -Djavax.net.ssl.trustStore=/full/path/to/cacerts -
> Djavax.net.ssl.trustStorePassword=password ClassName ARGS
> 
> Any help is greatly appreciated.
> 
> Thanks.
> 
> --
> Sincerely,
> David Webb
> Vice-President
> Hurff-Webb, Inc.
> http://www.hurff-webb.com
> (904) 861-2366
> (904) 534-8294 Mobile
> 
> 
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to