Re: Using SSO...

You are very strongly (what is a stronger word for strongly?)  
recommended to not use the SourceID demo certificates for anything  
beyond demonstration use, as those are publicly distributed - anyone  
who recognizes you use those certs can generate any 'trusted' message  
they like.

The java keytool is the recommended way to generate new certs; you  
need self-signed certificates. The final release of the toolkit (due  
shortly) will contain new certificates for the demo application.

-David Waite

On Apr 15, 2005, at 10:08 AM, David Marsh wrote:

> Hello,
>
> The certs that come with the ID-FF 1.2 Java Toolkit 2.0 Beta seem  
> to have expired.
>
> I was working through user guide chapter 2 page 10 and I cannot use  
> SSO and get this error :-
>
> 16:40:40,398 INFO  [SoapClientSocketFactory] Server is not using a  
> standard trusted CA, looking in local truststore.
> 16:40:40,476 INFO  [SoapClientSocketFactory] Server is not using a  
> standard trusted CA, looking in local truststore.
> 16:40:40,492 INFO  [JSSE14Support] SSL Error getting client Certs
> javax.net.ssl.SSLHandshakeException:  
> sun.security.validator.ValidatorException: No trusted certificate  
> found
>         at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a 
> (DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.AppInputStream.read 
> (DashoA6275)
>         at java.io.InputStream.read(InputStream.java:89)
>         at  
> org.apache.tomcat.util.net.jsse.JSSE14Support.synchronousHandshake 
> (JSSE14Support.java:88)
>         at org.apache.tomcat.util.net.jsse.JSSE14Support.handShake 
> (JSSE14Support.java:67)
>         at  
> org.apache.tomcat.util.net.jsse.JSSESupport.getPeerCertificateChain 
> (JSSESupport.java:120)
>         at org.apache.coyote.http11.Http11Processor.action 
> (Http11Processor.java:1049)
>         at org.apache.coyote.Request.action(Request.java:361)
>         at org.apache.coyote.tomcat5.CoyoteRequest.getAttribute 
> (CoyoteRequest.java:929)
>         at  
> org.apache.coyote.tomcat5.CoyoteRequestFacade.getAttribute 
> (CoyoteRequestFacade.java:214)
>         at  
> org.apache.catalina.authenticator.SSLAuthenticator.authenticate 
> (SSLAuthenticator.java:137)
>         at  
> org.apache.catalina.authenticator.AuthenticatorBase.invoke 
> (AuthenticatorBase.java:504)
>         at org.apache.catalina.core.StandardValveContext.invokeNext 
> (StandardValveContext.java:102)
>         at org.apache.catalina.core.StandardPipeline.invoke 
> (StandardPipeline.java:520)
>         at org.apache.catalina.core.StandardHostValve.invoke 
> (StandardHostValve.java:137)
>         at org.apache.catalina.core.StandardValveContext.invokeNext 
> (StandardValveContext.java:104)
>         at org.apache.catalina.valves.ErrorReportValve.invoke 
> (ErrorReportValve.java:117)
>         at org.apache.catalina.core.StandardValveContext.invokeNext 
> (StandardValveContext.java:102)
>         at org.apache.catalina.core.StandardPipeline.invoke 
> (StandardPipeline.java:520)
>         at org.apache.catalina.core.StandardEngineValve.invoke 
> (StandardEngineValve.java:109)
>         at org.apache.catalina.core.StandardValveContext.invokeNext 
> (StandardValveContext.java:104)
>         at org.apache.catalina.core.StandardPipeline.invoke 
> (StandardPipeline.java:520)
>         at org.apache.catalina.core.ContainerBase.invoke 
> (ContainerBase.java:929)
>         at org.apache.coyote.tomcat5.CoyoteAdapter.service 
> (CoyoteAdapter.java:160)
>         at org.apache.coyote.http11.Http11Processor.process 
> (Http11Processor.java:799)
>         at org.apache.coyote.http11.Http11Protocol 
> $Http11ConnectionHandler.processConnection(Http11Protocol.java:705)
>         at org.apache.tomcat.util.net.TcpWorkerThread.runIt 
> (PoolTcpEndpoint.java:577)
>         at org.apache.tomcat.util.threads.ThreadPool 
> $ControlRunnable.run(ThreadPool.java:683)
>         at java.lang.Thread.run(Thread.java:534)
> Caused by: sun.security.validator.ValidatorException: No trusted  
> certificate found
>         at sun.security.validator.SimpleValidator.buildTrustedChain 
> (SimpleValidator.java:304)
>         at sun.security.validator.SimpleValidator.engineValidate 
> (SimpleValidator.java:107)
>         at sun.security.validator.Validator.validate(Validator.java: 
> 202)
>         at sun.security.validator.Validator.validate(Validator.java: 
> 171)
>         at  
> com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkClientTrusted 
> (DashoA6275)
>         at  
> com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkClientTrusted 
> (DashoA6275)
>         ... 33 more
>
> Can I create my own certs? or do they have to be signed by sourceID ?
>
> Are there any instructions on how to do this?
>
> Please help ! :)
>
> regards
>
> David Marsh
> _______________________________________________
> sso-users mailing list
> [email protected]
> http://lists.sourceid.org/mailman/listinfo/sso-users
>