incubator-clerezza-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Reto Bachmann-Gmür (JIRA) <j...@apache.org>
Subject [jira] [Commented] (CLEREZZA-519) Warnings serving some static content using HTTPS
Date Thu, 12 May 2011 11:32:48 GMT

    [ https://issues.apache.org/jira/browse/CLEREZZA-519?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032362#comment-13032362
] 

Reto Bachmann-Gmür commented on CLEREZZA-519:
---------------------------------------------

The reson for this is that it tries to get the the page-not found page via https from the
own instance on the same virtual host (i.e. using the same hostname) as in the original request.
The problem is that java complains because localhost has a self-signed certificate and refuses
to get the content. A You can add the cert of localhost to the jvm (instruction son how to
do this).

By adding a resource at /favicon.ico you could prevent mosts 404 and the related error above.

> Warnings serving some static content using HTTPS
> ------------------------------------------------
>
>                 Key: CLEREZZA-519
>                 URL: https://issues.apache.org/jira/browse/CLEREZZA-519
>             Project: Clerezza
>          Issue Type: Bug
>            Reporter: Sergio Fernandez
>            Priority: Minor
>              Labels: security
>         Attachments: clerezza-out.txt
>
>
> Trying clerezza using HTTPS, I notice that it raises many exceptions related with some
static content, such as:
> zz>2011-05-12 12:59:00,656 [qtp30390269-39 - /favicon.ico]  WARN [qtp30390269-39 -
/favicon.ico] (JDK14LoggerAdapter.java\:588) - Exception (with no exception mapper)
> java.security.PrivilegedActionException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException:
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target
> (I'll also attach the full output produced)

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message