Re: Private CA 'jssecacerts' file location?

David Gibbs wrote:

Oddly though ... I put a sniffer on the system I'm trying to connect to
... and it's not capturing any packets from my java app. If I telnet
into that particular port, from the System i, packets are captured.

So it appears that my java app isn't even sending anything out ... which
is confusing in itself.

Ok, here's something that's odd.

I decided to write a simple test program to see if I could get a java
app to talk SSL by itself (outside of my client code).

The code can be found here: http://code.midrange.com/b671f289b4.html

When I run it as a QPGMR class user, I get the following error:

java -Djava.version=1.4 -classpath bin TestSSL

Consturcting URL

Opening connection

Connecting to URL

javax.net.ssl.SSLException: The certificate container *SYSTEM could
not be accessed.
at java.lang.Throwable.<init>(Throwable.java:195)

at java.lang.Exception.<init>(Exception.java:41)

at java.io.IOException.<init>(IOException.java:40)

at javax.net.ssl.SSLException.<init>(Unknown Source)

at
com.ibm.as400.ibmonly.net.ssl.SSLContextImpl.initialize(SSLContextImpl.java:632)

at
com.ibm.as400.ibmonly.net.ssl.SSLSocketImpl.init(SSLSocketImpl.java:455)


Based on a message in the archives, I tried running the same program as
a QSECOFR class user ... and it hung up on connecting to the URL:

java -Djava.version=1.4 -classpath bin TestSSL

Consturcting URL

Connecting to URL

Opening connection

javax.net.ssl.SSLHandshakeException: No compatible cipher suite
available between SSL end points.
at java.lang.Throwable.<init>(Throwable.java:195)

at java.lang.Exception.<init>(Exception.java:41)

at java.io.IOException.<init>(IOException.java:40)

at javax.net.ssl.SSLHandshakeException.<init>(Unknown Source)

at
com.ibm.as400.ibmonly.net.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1736)

at com.ibm.net.ssl.www.protocol.https.b.o(Unknown Source)

at com.ibm.net.ssl.www.protocol.https.q.connect(Unknown
Source)
at com.ibm.net.ssl.www.protocol.https.t.connect(Unknown
Source)
at TestSSL.main(TestSSL.java:8)


I guess I'm getting further ... at least I got packets across the wire
this time, but it's still not working correctly.

david