David, You may want to take a different approach and provide a custom SSL trust manager (which in its crudest and ugliest form may be programmed to simply trust all target servers)
Take a look at the 'Customizing SSL in HttpClient' section of the HttpClient SSL guide at the following location <http://jakarta.apache.org/commons/httpclient/sslguide.html> Hope this helps Oleg On Mon, 2004-01-05 at 22:47, David Webb wrote: > I have written a simple Java application to call a URL using Jakarta > HttpClient. The code works like a champ on my windows 2K development > workstation when accessing a URL the is protected by Siteminder (which > redirects to SSL for Authentication). The big difference is that when I try to > run the same code on a HPUX box I get the following message... > > javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: > CA certificate does not include basic constraints extension > > I read some posts about Trusted CAs. I used 'keytool' to create a keystore and > import the Root Certificate for the Trusted Authority and I start my JVM like > this... > > keystore filename is cacerts > keystore password is password > > java -Djavax.net.ssl.trustStore=/full/path/to/cacerts - > Djavax.net.ssl.trustStorePassword=password ClassName ARGS > > Any help is greatly appreciated. > > Thanks. > > -- > Sincerely, > David Webb > Vice-President > Hurff-Webb, Inc. > http://www.hurff-webb.com > (904) 861-2366 > (904) 534-8294 Mobile > > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]