users@glassfish.java.net

Re: SSL connection client certificate?

From: <glassfish_at_javadesktop.org>
Date: Thu, 28 Feb 2008 04:34:06 PST

Thanks for quick response.

> I guess the error :
>
> >com.sun.xml.ws.client.ClientTransportException: HTTP
> transport error:
> >javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path
> >building failed:
> sun.security.provider.certpath.SunCertPathBuilderExcep
> tion: unable to find >valid certification path to
> requested target.
>
> will come if you just comment the first one :
> System.setProperty("javax.net.ssl.trustStore",
> "<client.truststore.location>");
>
> Can you confirm this ?.
>
This part is resolved with correct truststore location.

> Now coming to the error from .Net WS : "The security
> token could not be authenticated or authorized"
>
> From what i could understand so far, this may happen
> if you are using SSL Mutual Authentication and the
> Service Does not Trust the Client Certificate. Make
> sure the CA cert of the issuer of client certificate
> is trusted by the .Net Service.
>
They have given us the certificates and i have added them with keytool in truststore.

But on the docs they are also saying that keyidentifier for certificate is 'abfbfb3d4sdnb5udshx6xx=' and is important for the configuration of testclient.(but they are only talking about .net client) so is this can be related to our jaxws client?

Do i have to use this keyIdentifier in my client ? and if yes then how? can u put some light on it?

Thanks
[Message sent by forum member 'manischsingh' (manischsingh)]

http://forums.java.net/jive/thread.jspa?messageID=261387