Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / General / July 2007

Tip: Looking for answers? Try searching our database.

Trust additional SSL CA

Thread view: 
Ian Pilcher - 30 Jul 2007 02:10 GMT
I am working on a project which will use XML-RPC over SSL (https).
Unfortunately, the server with which I am communicating has a
certificate which is signed with our internal CA key, rather than a
standard trusted CA key.  For now, I've simply disabled all of the SSL
checks entirely, using the method described here:

   http://ws.apache.org/xmlrpc/ssl.html

Since I do have a copy of the CA certificate, however, I'd much rather
use it to actually verify the server's identity when I connect.  I did
try importing the CA certificate into my keystore, but that didn't make
any difference.

Can anyone point me to something that will get me started in the right
direction?

Thanks!

Signature

========================================================================
Ian Pilcher                                         arequipeno@gmail.com
========================================================================

Esmond Pitt - 30 Jul 2007 03:18 GMT
> I did
> try importing the CA certificate into my keystore, but that didn't make
> any difference.

Import it into your *truststore*, i.e. 'cacerts', 'jssecacerts', or the
truststore you supplied when creating the initial SSLContext or the one
you named in the javax.net.ssl.truststore property.


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.