RE: Java and HTTPS

I have seen this sort of issue before and the fix is fairly simple.

After that you import it using the digital certificate manager.

Thanks,
Todd


At 04:42 PM 12/13/2006, you wrote:

Hi, Gary, your name was on some of the archive entries I already read. Here's what I am trying to do: I am trying to send a file to an HTTPS URL. I'm using Apache HttpClient to do this, and here's the Java code I wrote to do that:

HttpClient client = new HttpClient();
client.getHostConfiguration().setProxy(
                                System.getProperty("http.proxyHost"),

Integer.parseInt(System.getProperty("http.proxyPort")));
PostMethod method = new PostMethod("https://xxxxxxxxxxxxxxxxx";);
int status = client.executeMethod(method);
InputStream response = method.getResponseBodyAsStream();

This is just code to test that the connection is being made, normally I would be attaching a file. I also have jcert.jar, jnet.jar, and jsse.jar in my classpath. (I get the same results if they aren't, but they are in the classpath for the production application.)

The client's certificate was issued by "Entrust.net Secure Server Certification Authority" and it hasn't expired yet.

I did a little more testing. On the machine where I set up a certificate authority I get the message "Certificate is not signed by a trusted certificate authority". On another machine where there is no certificate authority set up, I get the message "javax.net.ssl.SSLException: The value specified for the argument is not correct". (It doesn't say what argument.) The errors occur at the call to executeMethod().

Obviously I'm confused too. And obviously I'm not understanding this SSL business properly. I wouldn't have expected to have to do any setup on the client at all just to communicate to an HTTPS server, but initially when I tried I was getting errors that suggested to me that I needed some kind of certificate. (That was a month ago before another project took priority, and now I don't have my notes on what happened back then.)

Regards
PC2

-----Original Message-----

From: java400-l-bounces@xxxxxxxxxxxx [mailto:java400-l-bounces@xxxxxxxxxxxx] On Behalf Of Gary L Peskin

Sent: December 13, 2006 11:51
To: 'Java Programming on and around the iSeries / AS400'
Subject: RE: Java and HTTPS

I'm very confused here. If you are sending a file to a business partner using HTTPS, normally your business partner will not require a client side certificate which is what you created. In other words, you would connect to the HTTPS server, it would present its certificate, you would validate that and go from there.

Can you tell us exactly what you're trying to do? How are you sending the file? Is this via a homegrown java program or what? Can you access the client via a web browser? If so, you can examine the certificate presented by the server and see who his CA is and diagnose from there.

Gary