java - SSL chain validation failed with intermediate cert -
i want understand way validation chain works. certs need in truststore?
i have chain root ca -> intermediate 1 -> intermediate 2 -> server cert. have intermediate 2 cert in truststore. on 1 test machine works right, on other not (contacting different server similar configuration). popular suncertpathbuilderexception: unable find valid certification path requested target exception. server sends full chain. guess solution put whole chain root ca truststore.
i want know why works on 1 machine , not other. possible have influence on how chain validation works? can server require full chain validation?
i not figure out, if default truststore jdk automatically included or not. 2 machines have different jdk versions 1.7.0_21 (not working) , 1.7.0_25 (working). matter?
one more thing: suncertpathbuilderexception - possible find out part of chain not like?
i happy hints. thanks, heike
you need certificate of any of signers in certificate chain. typically topmost one.
i have @ chain visible -djavax.net.debug=ssl,handshake
, @ local truststore file make sure @ least 1 of certificates in chain present same signature, date, subjectdn, issuerdn etc in debug log.
Comments
Post a Comment