Return-Path: Delivered-To: apmail-jakarta-httpclient-dev-archive@www.apache.org Received: (qmail 91629 invoked from network); 24 Aug 2006 13:58:11 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 24 Aug 2006 13:58:11 -0000 Received: (qmail 42948 invoked by uid 500); 24 Aug 2006 13:58:06 -0000 Delivered-To: apmail-jakarta-httpclient-dev-archive@jakarta.apache.org Received: (qmail 42849 invoked by uid 500); 24 Aug 2006 13:58:06 -0000 Mailing-List: contact httpclient-dev-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Help: List-Post: List-Id: "HttpClient Project" Reply-To: "HttpClient Project" Delivered-To: mailing list httpclient-dev@jakarta.apache.org Received: (qmail 42807 invoked by uid 99); 24 Aug 2006 13:58:06 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 24 Aug 2006 06:58:06 -0700 X-ASF-Spam-Status: No, hits=3.3 required=10.0 tests=DNS_FROM_RFC_ABUSE,HTML_10_20,HTML_MESSAGE,HTTPS_IP_MISMATCH,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of guy.van.tilborgh@gmail.com designates 64.233.166.176 as permitted sender) Received: from [64.233.166.176] (HELO py-out-1112.google.com) (64.233.166.176) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 24 Aug 2006 06:58:02 -0700 Received: by py-out-1112.google.com with SMTP id d80so708773pyd for ; Thu, 24 Aug 2006 06:57:42 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=n52jPQipzZwyqrfdfYd4glFJdYpLXIWent0MjYToYf97LCG+QejomMQqCN8/vqqpuTnTfKF07o0Uq4+4G+wC61l9QQ3K/Ui5uYeTz8VGWXdQDYe8nc+IEgttXdT5TNc9lQfXf7brSXFPh+uFGEogo/L+97BsFn569k5mdKQ4wd8= Received: by 10.35.60.15 with SMTP id n15mr2768191pyk; Thu, 24 Aug 2006 06:57:42 -0700 (PDT) Received: by 10.35.109.15 with HTTP; Thu, 24 Aug 2006 06:57:42 -0700 (PDT) Message-ID: <9555f0e0608240657p328aa7e9n35cacc2d40875a7b@mail.gmail.com> Date: Thu, 24 Aug 2006 15:57:42 +0200 From: Guy To: "HttpClient Project" Subject: Re: javax.net.ssl.SSLHandshakeException as a result of new GetMethod("/") ? In-Reply-To: <44ED9C66.1020302@odi.ch> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_134844_17161252.1156427862048" References: <9555f0e0608240508h4e7d0631o83062a8ed8eff3f0@mail.gmail.com> <44ED9C66.1020302@odi.ch> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N ------=_Part_134844_17161252.1156427862048 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Here is the wire log of the two requests (made in one program): the first call gives me an exception, the second one does not as you can see: first one: result key=3D'freetext' value=3D'Unexpected Exception occured: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target' second one: result key=3D'freetext' value=3D'The response from https://10.0.10.103:443/= does NOT matches regular expression "securit"(truststore used)' I left out all other logging the program normally does Thanx in advance 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -Java version: 1.5.0_07 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -Java vendor: Sun Microsystems Inc. 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -Java class path: D:\MyDoc\develop\Test\Java;D:\MyDoc\develop\DMan\dman\v3.0.0\classes;D:\MyD= oc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\commons- logging.jar ;D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\eif.jar;D:\M= yDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\Logger.jar;D:\MyD= oc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\mysql- connector-java-3.1.7-bin.jar ;D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\ojdbc14.jar;= D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\PD.jar;D:\MyD= oc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\situtil.jar;D:\MyDo= c\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\xerces.jar;D:\MyDoc\= develop\DMan\dman\v3.0.0\packaging\files\bin\windows\wrapper.jar;D:\MyDoc\d= evelop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\commons- codec-1.3.jar ;D:\MyDoc\develop\DMan\dman\v3.0.0\lib\xalan.jar;D:\MyDoc\develop\DMan\dman= \v3.0.0\lib\servlet.jar;D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\W= EB-INF\lib\jetty.jar;D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-= INF\lib\jetty- util.jar ;D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\servlet- api-2.5.jar ;D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\commons- httpclient-3.0.1.jar ;D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\derby.jar;D:= \MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\derbytools.jar;= D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\derbyclient.j= ar;D:\MyDoc\develop\DMan\dman\v3.0.0\packaging\files\WEB-INF\lib\derbynet.j= ar;D:\MyDoc\develop\Test\lib\xerces.jar;D:\MyDoc\develop\Test\lib\commons- httpclient-2.0.jar ;D:\MyDoc\develop\Test\lib\Logger.jar;D:\MyDoc\develop\Test\lib\PD.jar;D:\M= yDoc\develop\Test\lib\situtil.jar;D:\MyDoc\develop\Test\lib\xalan.jar 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -Operating system name: Windows XP 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -Operating system architecture: x86 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -Operating system version= : 5.1 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -SUN 1.5: SUN (DSA key/parameter generation; DSA signing; SHA-1, MD5 digests; SecureRandom; X.509 certificates; JKS keystore; PKIX CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores) 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -SunRsaSign 1.5: Sun RSA signature provider 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -SunJSSE 1.5: Sun JSSE provider(PKCS12, SunX509 key/trust factories, SSLv3, TLSv1) 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -SunJCE 1.5: SunJCE Provider (implements RSA, DES, Triple DES, AES, Blowfish, ARCFOUR, RC2, PBE= , Diffie-Hellman, HMAC) 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -SunJGSS 1.0: Sun (Kerberos v5) 2006/08/24 15:52:58:895 CEST [DEBUG] HttpClient - -SunSASL 1.5: Sun SASL provider(implements client mechanisms for: DIGEST-MD5, GSSAPI, EXTERNAL, PLAIN, CRAM-MD5; server mechanisms for: DIGEST-MD5, GSSAPI, CRAM-MD5) 2006/08/24 15:52:58:905 CEST [DEBUG] DefaultHttpParams - -Set parameter http.useragent =3D Jakarta Commons-HttpClient/3.0.1 2006/08/24 15:52:58:905 CEST [DEBUG] DefaultHttpParams - -Set parameter http.protocol.version =3D HTTP/1.1 2006/08/24 15:52:58:905 CEST [DEBUG] DefaultHttpParams - -Set parameter http.connection-manager.class =3D class org.apache.commons.httpclient.SimpleHttpConnectionManager 2006/08/24 15:52:58:905 CEST [DEBUG] DefaultHttpParams - -Set parameter http.protocol.cookie-policy =3D rfc2109 2006/08/24 15:52:58:905 CEST [DEBUG] DefaultHttpParams - -Set parameter http.protocol.element-charset =3D US-ASCII 2006/08/24 15:52:58:905 CEST [DEBUG] DefaultHttpParams - -Set parameter http.protocol.content-charset =3D ISO-8859-1 2006/08/24 15:52:58:905 CEST [DEBUG] DefaultHttpParams - -Set parameter http.method.retry-handler =3D org.apache.commons.httpclient.DefaultHttpMethodRetryHandler@18eb9e6 2006/08/24 15:52:58:905 CEST [DEBUG] DefaultHttpParams - -Set parameter http.dateparser.patterns =3D [EEE, dd MMM yyyy HH:mm:ss zzz, EEEE, dd-MMM-y= y HH:mm:ss zzz, EEE MMM d HH:mm:ss yyyy, EEE, dd-MMM-yyyy HH:mm:ss z, EEE, dd-MMM-yyyy HH-mm-ss z, EEE, dd MMM yy HH:mm:ss z, EEE dd-MMM-yyyy HH:mm:ss z, EEE dd MMM yyyy HH:mm:ss z, EEE dd-MMM-yyyy HH-mm-ss z, EEE dd-MMM-yy HH:mm:ss z, EEE dd MMM yy HH:mm:ss z, EEE,dd-MMM-yy HH:mm:ss z, EEE,dd-MMM-yyyy HH:mm:ss z, EEE, dd-MM-yyyy HH:mm:ss z] 2006/08/24 15:52:58:975 CEST [DEBUG] HttpConnection - -Open connection to 10.0.10.103:443 2006/08/24 15:53:00:237 CEST [DEBUG] header - ->> "GET /dman HTTP/1.1[\r][\n]" 2006/08/24 15:53:00:237 CEST [DEBUG] HttpMethodBase - -Adding Host request header 2006/08/24 15:53:00:287 CEST [DEBUG] header - ->> "User-Agent: Jakarta Commons-HttpClient/3.0.1[\r][\n]" 2006/08/24 15:53:00:287 CEST [DEBUG] header - ->> "Host: 10.0.10.103 [\r][\n]" 2006/08/24 15:53:00:287 CEST [DEBUG] header - ->> "[\r][\n]" 2006/08/24 15:53:02:931 CEST [DEBUG] header - -<< "HTTP/1.1 302 Temporarily moved[\r][\n]" 2006/08/24 15:53:02:931 CEST [DEBUG] header - -<< "p3p: CP=3D"NON CUR OTPi = OUR NOR UNI"[\r][\n]" 2006/08/24 15:53:02:931 CEST [DEBUG] header - -<< "content-type: text/html[\r][\n]" 2006/08/24 15:53:02:931 CEST [DEBUG] header - -<< "transfer-encoding: chunked[\r][\n]" 2006/08/24 15:53:02:931 CEST [DEBUG] header - -<< "date: Tue, 11 Jul 2006 05:51:30 GMT[\r][\n]" 2006/08/24 15:53:02:931 CEST [DEBUG] header - -<< "x-old-content-length: 1133[\r][\n]" 2006/08/24 15:53:02:931 CEST [DEBUG] header - -<< "location: https://10.0.10.103/dman/[\r][\n]" 2006/08/24 15:53:02:941 CEST [DEBUG] header - -<< "server: WebSEAL/5.1.0.0 (Build 031024)[\r][\n]" 2006/08/24 15:53:02:951 CEST [DEBUG] HttpMethodDirector - -Redirect require= d 2006/08/24 15:53:02:951 CEST [DEBUG] HttpMethodDirector - -Redirect requested to location 'https://10.0.10.103/dman/' 2006/08/24 15:53:02:951 CEST [DEBUG] HttpMethodDirector - -Redirecting from 'https://10.0.10.103:443/dman' to 'https://10.0.10.103/dman/ 2006/08/24 15:53:02:951 CEST [DEBUG] HttpMethodDirector - -Execute redirect 1 of 100 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "4" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "7" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "7" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\r]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "Moved Temporarily[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "3D[\n]" 2006/08/24 15:53:02:971 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "

Moved Temporarily

[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "

The Web resource you have requested has been temporarily moved.[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "Click here to fetch the resource.[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "
[non= e BUTTON]

[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:981 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:991 CEST [DEBUG] content - -<< "[\r]" 2006/08/24 15:53:02:991 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:991 CEST [DEBUG] content - -<< "0" 2006/08/24 15:53:02:991 CEST [DEBUG] content - -<< "[\r]" 2006/08/24 15:53:02:991 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:991 CEST [DEBUG] content - -<< "[\r]" 2006/08/24 15:53:02:991 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:02:991 CEST [DEBUG] HttpMethodBase - -Resorting to protoco= l version default close connection policy 2006/08/24 15:53:02:991 CEST [DEBUG] HttpMethodBase - -Should NOT close connection, using HTTP/1.1 2006/08/24 15:53:02:991 CEST [DEBUG] HttpConnection - -Connection is locked. Call to releaseConnection() ignored. 2006/08/24 15:53:02:991 CEST [DEBUG] HttpConnection - -Releasing connection back to connection manager. 2006/08/24 15:53:03:001 CEST [DEBUG] HttpConnection - -Open connection to 10.0.10.103:443 2006/08/24 15:53:03:602 CEST [DEBUG] header - ->> "GET /dman/ HTTP/1.1[\r][\n]" 2006/08/24 15:53:03:602 CEST [DEBUG] HttpMethodBase - -Adding Host request header 2006/08/24 15:53:03:602 CEST [DEBUG] header - ->> "User-Agent: Jakarta Commons-HttpClient/3.0.1[\r][\n]" 2006/08/24 15:53:03:602 CEST [DEBUG] header - ->> "Host: 10.0.10.103 [\r][\n]" 2006/08/24 15:53:03:602 CEST [DEBUG] header - ->> "[\r][\n]" 2006/08/24 15:53:03:792 CEST [DEBUG] HttpMethodDirector - -Closing the connection. 2006/08/24 15:53:03:792 CEST [DEBUG] HttpMethodDirector - -Method retry handler returned false. Automatic recovery will not be attempted 2006/08/24 15:53:03:792 CEST [DEBUG] HttpConnection - -Releasing connection back to connection manager. 2006/08/24 15:53:03:792 CEST [DEBUG] HttpConnection - -Releasing connection back to connection manager. 2006/08/24 15:53:03:792 CEST [DEBUG] HttpConnection - -Open connection to 10.0.10.103:443 result key=3D'ok' value=3D'0' result key=3D'value' value=3D'999999' result key=3D'freetext' value=3D'Unexpected Exception occured: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target' next monitor 2006/08/24 15:53:03:832 CEST [DEBUG] header - ->> "GET / HTTP/1.1[\r][\n]" 2006/08/24 15:53:03:832 CEST [DEBUG] HttpMethodBase - -Adding Host request header 2006/08/24 15:53:03:832 CEST [DEBUG] header - ->> "User-Agent: Jakarta Commons-HttpClient/3.0.1[\r][\n]" 2006/08/24 15:53:03:832 CEST [DEBUG] header - ->> "Host: 10.0.10.103 [\r][\n]" 2006/08/24 15:53:03:832 CEST [DEBUG] header - ->> "[\r][\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] header - -<< "HTTP/1.1 200 OK[\r][\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] header - -<< "p3p: CP=3D"NON CUR OTPi = OUR NOR UNI"[\r][\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] header - -<< "last-modified: Thu, 16 Oct 2003 20:01:01 GMT[\r][\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] header - -<< "content-type: text/html[\r][\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] header - -<< "date: Tue, 11 Jul 2006 05:51:30 GMT[\r][\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] header - -<< "content-length: 510[\r][\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] header - -<< "server: WebSEAL/5.1.0.0 (Build 031024)[\r][\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "
3D""
[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "
[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] content - -<< "[\n]" 2006/08/24 15:53:04:082 CEST [DEBUG] HttpMethodBase - -Resorting to protoco= l version default close connection policy 2006/08/24 15:53:04:082 CEST [DEBUG] HttpMethodBase - -Should NOT close connection, using HTTP/1.1 2006/08/24 15:53:04:082 CEST [DEBUG] HttpConnection - -Releasing connection back to connection manager. result key=3D'ok' value=3D'0' result key=3D'value' value=3D'200' result key=3D'freetext' value=3D'The response from https://10.0.10.103:443/does NOT matches regular expression "securit"(truststore used)' On 8/24/06, Ortwin Gl=FCck wrote: > > Guy, > > Please provide a wirelog of the two requests. > > Ortwin > > Guy wrote: > > Hi all, > > > > i have written an application that checks https connections. I use the > > HTTPClient 3.0.1 as described in the SSL guide > > > > Protocol myhttps =3D new Protocol("https", new MySSLSocketFactory(), 44= 3); > > > > HttpClient httpclient =3D new HttpClient(); > > httpclient.getHostConfiguration().setHost(myHost, myPort, myhttps); > > GetMethod httpget =3D new GetMethod(myObject); > > try { > > httpclient.executeMethod(httpget); > > > > byte[] repsonse =3D getResponseBody(); > > > > System.out.println(httpget.getStatusLine()); > > } finally { > > httpget.releaseConnection(); > > } > > > > i have two versions of the MySSLSocketFactory: one that does not use a > > truststore (accepting any certificate) and one that does. > > > > i have the following parameters to set: > > > > myHost, myPort, truststore (used to determine which version of the > > MySSLSocketFactory to use), truststorepassword and myObject. > > > > In the case i set myObject to "/" i get no exception, in case i set > > myObject to "/index.html" i get the following exception: > > > > javax.net.ssl.SSLHandshakeException: > > sun.security.validator.ValidatorException: PKIX path building failed: > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > find valid certification path to requested target > > > > The code works fine for other hosts and the result does not change > > when using the other version of MySSLSocketFactory: the value of > > myObject determines the exception (if the host experiences this > > problem) > > > > > > I am stunned because the certificates are valid and are in the > > truststore (if they are used) > > > > Any suggestion or help would be appreciated > > > > -- > [web] http://www.odi.ch/ > [blog] http://www.odi.ch/weblog/ > [pgp] key 0x81CF3416 > finger print F2B1 B21F F056 D53E 5D79 A5AF 02BE 70F5 81CF 3416 > > --------------------------------------------------------------------- > To unsubscribe, e-mail: httpclient-dev-unsubscribe@jakarta.apache.org > For additional commands, e-mail: httpclient-dev-help@jakarta.apache.org > > ------=_Part_134844_17161252.1156427862048--