java - SSL chain validation failed with intermediate cert -


i want understand way validation chain works. certs need in truststore?

i have chain root ca -> intermediate 1 -> intermediate 2 -> server cert. have intermediate 2 cert in truststore. on 1 test machine works right, on other not (contacting different server similar configuration). popular suncertpathbuilderexception: unable find valid certification path requested target exception. server sends full chain. guess solution put whole chain root ca truststore.

i want know why works on 1 machine , not other. possible have influence on how chain validation works? can server require full chain validation?

i not figure out, if default truststore jdk automatically included or not. 2 machines have different jdk versions 1.7.0_21 (not working) , 1.7.0_25 (working). matter?

one more thing: suncertpathbuilderexception - possible find out part of chain not like?

i happy hints. thanks, heike

you need certificate of any of signers in certificate chain. typically topmost one.

i have @ chain visible -djavax.net.debug=ssl,handshake , @ local truststore file make sure @ least 1 of certificates in chain present same signature, date, subjectdn, issuerdn etc in debug log.


Comments

Popular posts from this blog

ios - UICollectionView Self Sizing Cells with Auto Layout -

node.js - ldapjs - write after end error -

DOM Manipulation in Wordpress (and elsewhere) using php -