RE: SSL and server using self-signed certificate

2004-07-07 Thread Kalnichevski, Oleg
Andre This is a very common problem. Please consult 'Customizing SSL' section of the HttpClient SSL guide for details on how the problem can be resolved http://jakarta.apache.org/commons/httpclient/sslguide.html Oleg -Original Message- From: Andre-John Mas [mailto:[EMAIL PROTECTED]

Re: SSL and server using self-signed certificate

2004-07-07 Thread Eric Johnson
Andre, At a quick glance, it appears that there is one problem that I've experienced that the SSL guide doesn't seem to cover. Presumably, once you've created your self-certified certificate, you added it to your JVM's cacerts file using the keytool? I've found that a self-signed certificate

Re: SSL and server using self-signed certificate

2004-07-07 Thread Tim Wild
Further to earlier comments, here's the command line I use to import the cert into my keystore. You need to be in your JAVA_HOME/jre/lib/security directory when you run this command. keytool -import -trustcacerts -file certificat_name -keystore .\cacerts -alias alias-name Hope this helps. Tim

Re: SSL and server using self-signed certificate

2004-07-07 Thread Oleg Kalnichevski
Folks, The good thing about EasySSLProtocolSocketFactory is that its trust manager does not require a custom truststore at all. It basically trusts any certificate whose certificate chain contains only one entry, that is the certificate itself, and delegates the verification of all other