RE: Java and HTTPS

I'm very confused here.  If you are sending a file to a business partner
using HTTPS, normally your business partner will not require a client side
certificate which is what you created.  In other words, you would connect to
the HTTPS server, it would present its certificate, you would validate that
and go from there.

Can you tell us exactly what you're trying to do?  How are you sending the
file?  Is this via a homegrown java program or what?  Can you access the
client via a web browser?  If so, you can examine the certificate presented
by the server and see who his CA is and diagnose from there.

Gary

-----Original Message-----
From: java400-l-bounces@xxxxxxxxxxxx 
[mailto:java400-l-bounces@xxxxxxxxxxxx] On Behalf Of Clapham, Paul
Sent: Wednesday, December 13, 2006 11:09 AM
To: Java Programming on and around the iSeries / AS400
Subject: Java and HTTPS

Hello all,

We have a requirement to send a file to a business partner at 
a certain web address using the HTTPS protocol. So I have 
been trying to configure SSL on our iSeries (which is at 
V5R3). First I got the message "The certificate container 
*SYSTEM could not be accessed" so I set up a certificate 
authority and created a certificate. Then I got the 
authorization problems so (via the archives of this list) I 
found out how to allow access to the certificate.

Now the message I am getting is "Certificate is not signed by 
a trusted certificate authority". And now I'm stuck. I've 
been going through the "iSeries Wired Network Security" 
redbook and it says that the iSeries comes with certificates 
from Verisign and so on. But I don't see how to make Java use 
those certificates. And it's got a section on configuring 
which applications will trust my certificate authority, but 
"Java" doesn't seem to be one of the applications on the list.

So as I say, I'm stuck. Does anybody know what I should do 
next? Or am I going down the wrong path?

Regards
Paul Clapham