You should get an error that says 'untrusted chain' or something like
that.  Importing it will solve this problem.  Use keytool utility in
your JDK implementation.  Search for how to use it.

d.

Ozgur wrote:
Hi Becky,

Try to import the certificates into the java keystore
($JAVA_HOME/jre/lib/security/cacerts) instead of putting it into your
keystore.

Regards,
Ozgur ..

-----Original Message-----
From: A mailing list for discussion about Sun Microsystem's Java Servlet
API Technology. [mailto:[EMAIL PROTECTED]] On Behalf Of
Becky Phaneuf
Sent: Tuesday, November 19, 2002 2:01 PM
To: [EMAIL PROTECTED]
Subject: can't authenticate against company-generated certificate

Hi everyone,

I have a servlet that is tasked to download various files from a secure
site.   It uses an HttpsURLConnection to connect to the site's root and
passes my Authenticator class (w/ username and password) as the default
authenticator.   It used to work fine until the site's admin replaced
their verisign certificate with an in-house-generated one.  Now my
servlet receives a java.security.cert.CertificateException stating that
it cannot find a trusted certificate.

I tried adding the server's certificate to my server's keystore, but
I'm afraid that didn't work.  I believe I have to obtain the certificate
and somehow validate it.  If anyone has experience with this I'd greatly
appreciated it.

Thanks in advance,
-Becky

________________________________________________________________________
___
To unsubscribe, send email to [EMAIL PROTECTED] and include in the
body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html





--
David Mossakowski
Instinet Corporation



*******************************************************************************
<<Disclaimer>>

This message is intended only for the use of the Addressee and
may contain information that is PRIVILEGED and/or
CONFIDENTIAL or both.

This email is intended only for the personal and confidential use
of the recipient(s) named above.

If the reader of this email is not an intended recipient, you have
received this email in error and any review, dissemination,
distribution or copying is strictly prohibited.

If you have received this email in error, please notify the sender
immediately by return mail and permanently deleting the copy
you received.

Thank you.

*******************************************************************************

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to