Hello. I'm new in using globus, can any one help me with errors about security certifaicate.I used the the CA contained in the GlobusToolkit to generate a security certificate and sign it. And I suceeded in generating a certificate wiht a subject name "O=Grid, OU=GlobusTest, OU=simpleCA-ibm.grid, CN=ibm.grid". I could generate a proxy an can use the gridftp and successfully run CountClient example. however when I used the java cogkit to invoke the WebService in Eclipse I came across the following error:
faultCode=OTHER_ERROR: Unable to resolve imported document at 'https://192.168.11.137:8443/share/schema/wfs/WFS_bindings.wsdl'.: java.security.cert.CertificateException: No subject alternative names present: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present I had add the self-signed cerficifation of the Simple CA using ketools. After I typed the url: https://192.168.11.137:8443/share/schema/wfs/WFS_bindings.wsdl into the blank of my broswer(firefox), then I got a warning says that: You have attemped to establish a connection with "192.168.11.137". However,the security certificate presented belonged to"ibm.grid". It is possible,though unlikely, that some one may be trying to intercept your communication with this web site.... So it seems that the reason for this error is that the Common Name of the certificate is "ibm .grid", but the java code use IP(the IP is retrived from the WSDL of the web serveice) as adress to acess the Webservice. So the cerfificate need a alternative name, But how can I add a alternative name into the certifacation with the simple CA contained in GlobusToolkit? Besides adding a alternative name into my certificate, are there other ways to solve this problem? How to make java recognize the Common Name and IP at the same time? Thank you! Lorkyo
