Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@geronimo.apache.org
Received-SPF: pass (asf.osuosl.org: domain of ammulder@gmail.com designates
 64.233.184.229 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=fK0Do+aI5oYoVE8eIfYKTKyx0ccM9SX/oZbdOkqd9GxNB5/jPlsyTaLNwb7WTm29NKWEpw+dY4GgH724GzzfpADLihuPSFq0Ut/fRK2Zn118fcJw2K9gbUafC/QsyqFkJVke1KOsq/kMh1b5TdRYY4McJM3TetenWYNXLuz71aE=
Message-ID: <74e15baa0603252249r3182f891j7446aaacae0af279@mail.gmail.com>
Date: Sun, 26 Mar 2006 01:49:38 -0500
From: "Aaron Mulder" <ammulder@alumni.princeton.edu>
Sender: ammulder@gmail.com
To: user@geronimo.apache.org
Subject: Re: Accessing an https URL from my jsp page
In-Reply-To: <20060326021901.5CF62DA844@mailserver6.hushmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <20060326021901.5CF62DA844@mailserver6.hushmail.com>

So is the problem that the HTTPS server certificate is not trusted
until you configure something for your SSL client?  You might be able
to import the CA cert for the server into the default trust store at
var/security/keystore (at least, that's where it is for now; it will
be moved in Geronimo 1.2).

Thanks,
    Aaron

On 3/25/06, stevenspencer@hushmail.com <stevenspencer@hushmail.com> wrote:
> I just can't figure out how I can access an https URL from a jsp
> page.  I've tried everything.  For example,
>
> <c:import url=3D"https://www.my-ssl-url-here.com/"/>
>
> always results in:
>
> javax.servlet.ServletException: javax.servlet.jsp.JspException:
> Problem accessing the absolute URL "https://www.my-ssl-url-
> here.com/". javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException:
> unable to find valid certification path to requested target
>
> What I'm really trying to do is use a JAR file which downloads a
> file over https, but I figure I might as well get <c:imiport/>
> working first...
>
> After hours and hours of googling and trying everything I can find,
> I have gotten nowhere.  There's no catalina.policy file anywhere on
> my computer, no server.xml, etc.
>
> I greatly appreciate any help I can get on this... step by step
> instructions would be fantastic.  I just have no idea where to put
> anything like catalina.policy or server.xml (if they're even
> required) because the directory & file names in my Geronimo
> directory have absolutely nothing in common with any information I
> can find on this topic on the web :(
>
>
>
> Concerned about your privacy? Instantly send FREE secure email, no accoun=
t required
> http://www.hushmail.com/send?l=3D480
>
> Get the best prices on SSL certificates from Hushmail
> https://www.hushssl.com?l=3D485
>
>