hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Erxiang Liu <erxi...@us.ibm.com>
Subject Re: Easy fix for SSL errors ?
Date Mon, 08 Jan 2007 21:59:11 GMT

You can try  importing the sf_issuing.crt into your jre keystore(named
cacerts. password is changeit)

like this:

keytool -import -trustcacerts -alias server -keystore cacerts -file

usually cacerts is located at \jre\lib\security directory.

give it a try..


             "Jacques Poulin"                                              
             mail.com>                                                  To 
             01/08/2007 02:38          >                                   
             PM                                                         cc 
             Please respond to         Easy fix for SSL errors ?           
             "HttpClient User                                              


I'm having a problem connecting to an SSL site using HttpClient, and I'm
looking for an easy fix if possible.

The web site is http://www.pinnaclesports.com.

Before today, when I tried to login to this web site with Firefox, the
browser complained that Pinnacle was not using a valid certificate.  I
complained to Pinnacle, and they responded that I had to import into
the certificate at this address :


I did that, and the error went away.

With Internet Explorer, there was no problem from the beginning.

With HttpClient, I get the following exception :

Fatal transport error: sun.security.validator.ValidatorException: PKIX path
building failed:
unable to find valid certification path to requested target

I searched for an answer, and stumbled on a possible fix using the
utility to import the certificate.  I did the following :

keytool -import -alias starfield -file c:\download\sf_issuing.cer

I tried my program again, and it gave me the same problem.

Bottom line is this : I have no interest in understanding the inner
of SSL and its configuration in Java.  All I want is some easy way to use
HttpClient for PinnacleSports' SSL sections.  All the other web sites I
to connect to using SSL work, and I just want Pinnacle Sports to work too.

So : is there an easy fix to this ?

Thank you very much for your time if you decide to answer...

To unsubscribe, e-mail: httpclient-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-user-help@jakarta.apache.org

  • Unnamed multipart/related (inline, None, 0 bytes)
View raw message