AW: Using SSO...

Hi David,

Yes, you are right. Certs in "ID-FF Java Toolkit 2.0 Beta" version have been
timed out.

If you are using self-signed certificates, you also have to make them
available to Java as a trusted certificate. If not, the core SSL classed
will throw the exception as listed below.

Either import the certificate as trusted "keytool -trustcacerts ..." to your
keystore, or import it as certificate into your
$JRE_HOME/lib/security/cacerts file.

HTH, Jochen

> -----Ursprungliche Nachricht-----
> Von: [email protected]
> [mailto:[email protected]]Im Auftrag von David Marsh
> Gesendet: Freitag, 15. April 2005 18:09
> An: [email protected]
> Betreff: [SourceID SSO-users] Using SSO...
>
>
> Hello,
>
> The certs that come with the ID-FF 1.2 Java Toolkit 2.0 Beta seem
> to have expired.
>
> I was working through user guide chapter 2 page 10 and I cannot
> use SSO and get this error :-
>
> 16:40:40,398 INFO  [SoapClientSocketFactory] Server is not using
> a standard trusted CA, looking in local truststore.
> 16:40:40,476 INFO  [SoapClientSocketFactory] Server is not using
> a standard trusted CA, looking in local truststore.
> 16:40:40,492 INFO  [JSSE14Support] SSL Error getting client Certs
> javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: No trusted certificate found
>         at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.AppInputStream.read(DashoA6275)
>         at java.io.InputStream.read(InputStream.java:89)
>         at
> org.apache.tomcat.util.net.jsse.JSSE14Support.synchronousHandshake
> (JSSE14Support.java:88)
>         at
> org.apache.tomcat.util.net.jsse.JSSE14Support.handShake(JSSE14Supp
> ort.java:67)
>         at
> org.apache.tomcat.util.net.jsse.JSSESupport.getPeerCertificateChai
> n(JSSESupport.java:120)
>         at
> org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:1049)
>         at org.apache.coyote.Request.action(Request.java:361)
>         at
> org.apache.coyote.tomcat5.CoyoteRequest.getAttribute(CoyoteRequest
> .java:929)
>         at
> org.apache.coyote.tomcat5.CoyoteRequestFacade.getAttribute(CoyoteR
> equestFacade.java:214)
>         at
> org.apache.catalina.authenticator.SSLAuthenticator.authenticate(SS
> LAuthenticator.java:137)
>         at
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(Authent
> icatorBase.java:504)
>         at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardV
> alveContext.java:102)
>         at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.
> java:520)
>         at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValv
> e.java:137)
>         at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardV
> alveContext.java:104)
>         at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValv
> e.java:117)
>         at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardV
> alveContext.java:102)
>         at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.
> java:520)
>         at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngine
> Valve.java:109)
>         at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardV
> alveContext.java:104)
>         at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.
> java:520)
>         at
> org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929)
>         at
> org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160)
>         at
> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:799)
>         at
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.pr
> ocessConnection(Http11Protocol.java:705)
>         at
> org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:577)
>         at
> org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(Thre
> adPool.java:683)
>         at java.lang.Thread.run(Thread.java:534)
> Caused by: sun.security.validator.ValidatorException: No trusted
> certificate found
>         at
> sun.security.validator.SimpleValidator.buildTrustedChain(SimpleVal
> idator.java:304)
>         at
> sun.security.validator.SimpleValidator.engineValidate(SimpleValida
> tor.java:107)
>         at sun.security.validator.Validator.validate(Validator.java:202)
>         at sun.security.validator.Validator.validate(Validator.java:171)
>         at
> com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkClientTrust
> ed(DashoA6275)
>         at
> com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkClientTrust
> ed(DashoA6275)
>         ... 33 more
>
> Can I create my own certs? or do they have to be signed by sourceID ?
>
> Are there any instructions on how to do this?
>
> Please help ! :)
>
> regards
>
> David Marsh
> _______________________________________________
> sso-users mailing list
> [email protected]
> http://lists.sourceid.org/mailman/listinfo/sso-users
>