java - SSL chain validation failed with intermediate cert -


i want understand way validation chain works. certs need in truststore?

i have chain root ca -> intermediate 1 -> intermediate 2 -> server cert. have intermediate 2 cert in truststore. on 1 test machine works right, on other not (contacting different server similar configuration). popular suncertpathbuilderexception: unable find valid certification path requested target exception. server sends full chain. guess solution put whole chain root ca truststore.

i want know why works on 1 machine , not other. possible have influence on how chain validation works? can server require full chain validation?

i not figure out, if default truststore jdk automatically included or not. 2 machines have different jdk versions 1.7.0_21 (not working) , 1.7.0_25 (working). matter?

one more thing: suncertpathbuilderexception - possible find out part of chain not like?

i happy hints. thanks, heike

you need certificate of any of signers in certificate chain. typically topmost one.

i have @ chain visible -djavax.net.debug=ssl,handshake , @ local truststore file make sure @ least 1 of certificates in chain present same signature, date, subjectdn, issuerdn etc in debug log.


Comments

Popular posts from this blog

Issues changing the value of an element in an array in matlab -

php - MySQLi binding parameters in a prepared statement doesn't work unless inserted after "WHERE" -

vb.net - Alternative to the T-SQL AS keyword -