Using SSO...
"David Marsh" <[email protected]> Fri, 15 Apr 2005 12:08:34 -0400
| Newsgroups | gmane.comp.sourceid.sso.user |
|---|---|
| Message-ID | <[email protected]> |
Hello,
The certs that come with the ID-FF 1.2 Java Toolkit 2.0 Beta seem to have =
expired.
I was working through user guide chapter 2 page 10 and I cannot use SSO =
and get this error :-
16:40:40,398 INFO [SoapClientSocketFactory] Server is not using a =
standard trusted CA, looking in local truststore.
16:40:40,476 INFO [SoapClientSocketFactory] Server is not using a =
standard trusted CA, looking in local truststore.
16:40:40,492 INFO [JSSE14Support] SSL Error getting client Certs
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorExcept=
ion: No trusted certificate found
at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.AppInputStream.read(DashoA6275)
at java.io.InputStream.read(InputStream.java:89)
at org.apache.tomcat.util.net.jsse.JSSE14Support.synchronousHandsha=
ke(JSSE14Support.java:88)
at org.apache.tomcat.util.net.jsse.JSSE14Support.handShake(JSSE14Su=
pport.java:67)
at org.apache.tomcat.util.net.jsse.JSSESupport.getPeerCertificateCh=
ain(JSSESupport.java:120)
at org.apache.coyote.http11.Http11Processor.action(Http11Processor.=
java:1049)
at org.apache.coyote.Request.action(Request.java:361)
at org.apache.coyote.tomcat5.CoyoteRequest.getAttribute(CoyoteReque=
st.java:929)
at org.apache.coyote.tomcat5.CoyoteRequestFacade.getAttribute(Coyot=
eRequestFacade.java:214)
at org.apache.catalina.authenticator.SSLAuthenticator.authenticate(=
SSLAuthenticator.java:137)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(Authe=
nticatorBase.java:504)
at org.apache.catalina.core.StandardValveContext.invokeNext(Standar=
dValveContext.java:102)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipelin=
e.java:520)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostVa=
lve.java:137)
at org.apache.catalina.core.StandardValveContext.invokeNext(Standar=
dValveContext.java:104)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportVa=
lve.java:117)
at org.apache.catalina.core.StandardValveContext.invokeNext(Standar=
dValveContext.java:102)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipelin=
e.java:520)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngi=
neValve.java:109)
at org.apache.catalina.core.StandardValveContext.invokeNext(Standar=
dValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipelin=
e.java:520)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java=
:929)
at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.ja=
va:160)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor=
.java:799)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.=
processConnection(Http11Protocol.java:705)
at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint=
.java:577)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(Th=
readPool.java:683)
at java.lang.Thread.run(Thread.java:534)
Caused by: sun.security.validator.ValidatorException: No trusted certificat=
e found
at sun.security.validator.SimpleValidator.buildTrustedChain(SimpleV=
alidator.java:304)
at sun.security.validator.SimpleValidator.engineValidate(SimpleVali=
dator.java:107)
at sun.security.validator.Validator.validate(Validator.java:202)
at sun.security.validator.Validator.validate(Validator.java:171)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkClientTru=
sted(DashoA6275)
at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkClientTru=
sted(DashoA6275)
... 33 more
Can I create my own certs? or do they have to be signed by sourceID ?=20
Are there any instructions on how to do this?
Please help ! :)
regards
David Marsh