Hello. I'm new in using globus, can any one help me with errors about certifaicate.I use the the CA contianed in GlobusToolkit generating certificate and sign it. I suceeded in generating a certificate wiht a subject name:"O=Grid, OU=GlobusTest, OU=simpleCA-ibm.grid, CN=ibm.grid". I could make a proxy an can use the grid ftp and successfully run CountClient example. however when I used the java cogkit to invoke the WebService in Eclipse I came across the following error:
faultCode=OTHER_ERROR: Unable to resolve imported document at 'https://192.168.11.137:8443/share/schema/wfs/WFS_bindings.wsdl'.: java.security.cert.CertificateException: No subject alternative names present: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present I had add the slf-signed cerficifation of the Simple CA use ketools. And when I typed the url: https://192.168.11.137:8443/share/schema/wfs/WFS_bindings.wsdl into the blank of my broser, I get a warning says that: You have attemped to establish a connection with "192.168.11.137". However,the security certificate presented belonged to"ibm.grid". It is possible,though unlikely, that some one may be trying to intercept your communication with this web site.... So it seems that the reason for this error is that the subject name in the certificate is "ibm .grid", but the java code use IP(the IP is retrived from the WSDL of the web serveice) to acess the Webservice. So it need a alternative name, But how can I add a alternative name into the certifacation with he SImple CA of GlobusToolkit? Besides adding a alternative name into my certificate, are there other ways to solve this problem? How to make java recognize the name and IP at the same time? Thank you! Lorkyo
