RE: Private CA 'jssecacerts' file location?

-----Original Message-----
From: java400-l-bounces@xxxxxxxxxxxx [mailto:java400-l-
bounces@xxxxxxxxxxxx] On Behalf Of David Gibbs
Sent: Thursday, November 08, 2007 12:07 PM
To: Java Programming on and around the iSeries / AS400
Subject: Re: Private CA 'jssecacerts' file location?

David Gibbs wrote:

Oddly though ... I put a sniffer on the system I'm trying to connect

to

... and it's not capturing any packets from my java app. If I telnet
into that particular port, from the System i, packets are captured.

So it appears that my java app isn't even sending anything out ...

which

is confusing in itself.

Ok, here's something that's odd.

I decided to write a simple test program to see if I could get a java
app to talk SSL by itself (outside of my client code).

The code can be found here: http://code.midrange.com/b671f289b4.html

When I run it as a QPGMR class user, I get the following error:

java -Djava.version=1.4 -classpath bin TestSSL

Consturcting URL

Opening connection

Connecting to URL

javax.net.ssl.SSLException: The certificate container *SYSTEM could
not be accessed.
at java.lang.Throwable.<init>(Throwable.java:195)

at java.lang.Exception.<init>(Exception.java:41)

at java.io.IOException.<init>(IOException.java:40)

at javax.net.ssl.SSLException.<init>(Unknown Source)

at
com.ibm.as400.ibmonly.net.ssl.SSLContextImpl.initialize(SSLContextImpl.
java:632)

at
com.ibm.as400.ibmonly.net.ssl.SSLSocketImpl.init(SSLSocketImpl.java:455
)


Based on a message in the archives, I tried running the same program as
a QSECOFR class user ... and it hung up on connecting to the URL:

java -Djava.version=1.4 -classpath bin TestSSL

Consturcting URL

Connecting to URL

Opening connection

javax.net.ssl.SSLHandshakeException: No compatible cipher suite
available between SSL end points.
at java.lang.Throwable.<init>(Throwable.java:195)

at java.lang.Exception.<init>(Exception.java:41)

at java.io.IOException.<init>(IOException.java:40)

at javax.net.ssl.SSLHandshakeException.<init>(Unknown Source)

at
com.ibm.as400.ibmonly.net.ssl.SSLSocketImpl.startHandshake(SSLSocketImp
l.java:1736)

at com.ibm.net.ssl.www.protocol.https.b.o(Unknown Source)

at com.ibm.net.ssl.www.protocol.https.q.connect(Unknown
Source)
at com.ibm.net.ssl.www.protocol.https.t.connect(Unknown
Source)
at TestSSL.main(TestSSL.java:8)


I guess I'm getting further ... at least I got packets across the wire
this time, but it's still not working correctly.

david


--
System i ... for when you can't afford to be out of business
--
This is the Java Programming on and around the iSeries / AS400
(JAVA400-L) mailing list
To post a message email: JAVA400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.