Re: SSLPeerUnverifiedException in OpenJDK-6

2012-09-12 Thread Xuelei Fan
Per the request of SSL/TLS protocols, see section 7.2 of RFC5246: certificate_list This is a sequence (chain) of certificates. The sender's certificate MUST come first in the list. Each following certificate MUST directly certify the one preceding it. >From the logs, the se

Re: SSLPeerUnverifiedException in OpenJDK-6

2012-09-12 Thread Hitesh Bhanushali
Thanks Xuelei for the reply! So is this order required in OpenJDK-6 specifically? Because, things are working fine with OpenJDK-7 and SunJDK 6-7 on client side with the same server. ~Hitesh On Wed, Sep 12, 2012 at 3:43 PM, Xuelei Fan wrote: > Per the request of SSL/TLS protocols, see section 7

Re: SSLPeerUnverifiedException in OpenJDK-6

2012-09-12 Thread Xuelei Fan
On 9/12/2012 6:37 PM, Hitesh Bhanushali wrote: > Thanks Xuelei for the reply! > > So is this order required in OpenJDK-6 specifically? Because, things are > working fine with OpenJDK-7 and SunJDK 6-7 on client side with the same > server. > We tolerant out-of-order certificate list [1] in JDK 7,

Re: SSLPeerUnverifiedException in OpenJDK-6

2012-09-12 Thread Hitesh Bhanushali
I see.. Thanks a lot Xuelei ! This issue really burnt my huge no. of hours. Appreciate your help ! On Wed, Sep 12, 2012 at 4:11 PM, Xuelei Fan wrote: > On 9/12/2012 6:37 PM, Hitesh Bhanushali wrote: > > Thanks Xuelei for the reply! > > > > So is this order required in OpenJDK-6 specifically? Bec