hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "bashiro" <bash...@myway.com>
Subject HttpClient and Simple SSL --WORKS FINE NOW
Date Fri, 16 Dec 2005 21:46:04 GMT

Tim,

Your solution works very fine.....
You know I had this proble for over 3 months and did not want to
bore the forum with the same question again and again.
So it's very great you figured this out.

In the Dev IDE that I'm working with, the cacerts file is about 18kb. While the one you sent
to me is about 27kb. I even tried with the one under the jre 1.5  (30kb) and it works fine.

SO obviousely it's the Dev ide enviroment.

Thanks





Bashiro

 --- On Fri 12/16, Tim Watts < timtw@earthlink.net > wrote:
From: Tim Watts [mailto: timtw@earthlink.net]
To: bashiro@myway.com
Date: Fri, 16 Dec 2005 00:29:44 -0500
Subject: Fwd: Re: HttpClient and Simple SSL

Looks like my attachment got stripped away. I thought I might have better luck  if I sent
it to you directly...----------  Forwarded Message  ----------Subject: Re: HttpClient and
Simple SSLDate: Thursday 15 December 2005 19:04From: Tim Watts <timtw@earthlink.net>To:
"HttpClient User Discussion" <httpclient-user@jakarta.apache.org>I've attached cacerts
from my linux box. I copied it to$JAVAHOME/jre/lib/security on a windows box (making a backup
of the originalcacerts 1st of course).Ultimately, what I believe the problem was was that
it was recieving acertificate from the server which was signed by a CA whose certificate wasabsent
in the windows distro of cacerts. I noticed that the windows file wasaround 11K while the
linux file is around 26K.What website are you going to?On Thursday 15 December 2005 05:23,
bashiro wrote:> Tim,>> This is unbelievable !> Could you zip the files you copied
and send a> copy for me to try ?> Where did you copy them from and to where under wondows
  
?>> Thanks in advance> bashiro>>> Bashiro>>  --- On Wed 12/14, Tim
Watts < timtw@earthlink.net > wrote:> From: Tim Watts [mailto: timtw@earthlink.net]>
To: httpclient-user@jakarta.apache.org> Date: Wed, 14 Dec 2005 21:31:44 -0500> Subject:
Re: HttpClient and Simple SSL>> bashiro,I copied the file to a windows box and it fixed
the problem. Hope> you have similar luck.On Wednesday 14 December 2005 00:21, bashiro wrote:>>
I will give that a try to see what happens.> Thanks for your effort. Have> you tried
it yet ?>> Bashiro>>  --- On Tue 12/13, Tim Watts <> timtw@earthlink.net
> wrote:> From: Tim Watts [mailto:> timtw@earthlink.net]> To: httpclient-user@jakarta.apache.org>
     Cc:> Vivek.Satsangi@xerox.com, bashiro@myway.com> Date: Tue, 13 Dec 2005> 22:12:33
-0500> Subject: Re: HttpClient and Simple SSL>> Good news. I was> able to reproduce
the error on my linux box. I did so by> (temporarily)> removing the cacerts file. Although
I haven't tried it yet> myself, I'm> fairly 
confident that if you copy> $JAVAHOME/jre/lib/security/cacerts to> the same location
on your windows box> the problem will disappear.On> Tuesday 13 December 2005 17:22,
Tim Watts> wrote:> On Tuesday 13 December> 2005 15:03, Satsangi, Vivek wrote:>
> C) You> can also try to output the> full>> http handshake. Then you will
be> > able to> tell whether it could find the> keystore at all, whether the CRL>
> check> failed or the actual certificate> getting, etc.>> I set the log level
to> DEBUG for> org.apache.commons.httpclient and> httpclient.wire. However, I>
don't> believe I saw the handshake occur in the> log. The closest thing I> see are>
these entries below. What category should> I be adding to see the> SSL> handshake?
[I did this on my linux box since I> won't have access to>> windows until later this
evening.]>> 2005-12-13 17:13:15,537 DEBUG>> [org.apache.commons.httpclient.HttpClient]>
SUN 1.42: SUN (DSA>> key/parameter generation; DSA signing; SHA-1, MD5> digests;

SecureRandom;>> X.509 certificates; JKS keystore; PKIX> CertPathValidator; PKIX>>
CertPathBuilder; LDAP, Collection CertStores)> 2005-12-13 17:13:15,537>> DEBUG [org.apache.commons.httpclient.HttpClient]>
SunJSSE 1.42: Sun JSSE>> provider(implements RSA Signatures, PKCS12, SunX509> key/trust
factories,>> SSLv3, TLSv1)> 2005-12-13 17:13:15,537 DEBUG>> [org.apache.commons.httpclient.HttpClient]>
SunRsaSign 1.42: SUN's> provider> for RSA signatures> 2005-12-13 17:13:15,537 DEBUG>>
[org.apache.commons.httpclient.HttpClient]> SunJCE 1.42: SunJCE Provider>> (implements
DES, Triple DES, AES, Blowfish,> PBE, Diffie-Hellman,> HMAC-MD5,> HMAC-SHA1)>
2005-12-13 17:13:15,537 DEBUG>> [org.apache.commons.httpclient.HttpClient]> SunJGSS
1.0: Sun (Kerberos>> v5)>>>> --------------------------------------------------------------------->
To>> unsubscribe, e-mail: httpclient-user-unsubscribe@jakarta.apache.org> For>>
additional commands, e-mail:>> 
httpclient-user-help@jakarta.apache.org------------------------------------>>>---------------------------------To
unsubscribe, e-mail:>>> httpclient-user-unsubscribe@jakarta.apache.orgFor additional
commands,>> e-mail: httpclient-user-help@jakarta.apache.org>>> _______________________________________________>
No banners. No pop-ups. No> kidding.> Make My Way  your home on the>> Web - http://www.myway.com>>>>>
---------------------------------------------------------------------> To> unsubscribe,
e-mail: httpclient-user-unsubscribe@jakarta.apache.org> For> additional commands, e-mail:>
httpclient-user-help@jakarta.apache.org------------------------------------>---------------------------------To
unsubscribe, e-mail:> httpclient-user-unsubscribe@jakarta.apache.orgFor additional commands,>
e-mail: httpclient-user-help@jakarta.apache.org>> _______________________________________________>
No banners. No pop-ups. No kidding.> Make My Way  your home on the Web - 
http://www.myway.com>>>> --------------------------------------------------------------------->
To unsubscribe, e-mail: httpclient-user-unsubscribe@jakarta.apache.org> For additional
commands, e-mail: httpclient-user-help@jakarta.apache.org-------------------------------------------------------Attachment:
cacerts  (36.61KB)

_______________________________________________
No banners. No pop-ups. No kidding.
Make My Way  your home on the Web - http://www.myway.com



---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-user-help@jakarta.apache.org


Mime
View raw message