I'm trying to import a PKCS12 certificate into a Keystore:KeyStore keyStore = KeyStore.getInstance( "PKCS12" );keyStore.load( new FileInputStream( "/tmp/client.p12" ), "changeit".toCharArray() );This code yields the exception below:Exception in thread "main" java.io.IOException: DER input, ...

hi , when i set the client side Authentication to true.the server throws the following error."IOException in getSession(): javax.net.ssl.SSLException: java.lang.NullPointerException". i am using j2sdk 1.4.02 version and jsse ver 1.3.platforms WindowsXp and Solaris Unix )The truststore and its ...

I'm implementing EAP/TLS and need acces to the master key negotiated during handshake. Is there a way to access in Java, I know I can do it in C++ using openssl.

Hello FriendsThis is my client program://This program listens the server and gets the orders with more than one itemimport java.net.Socket;import java.net.ServerSocket;import java.io.DataInputStream;import java.io.DataOutputStream;public class client{public static void main(String ...

Can someone help with this error, I can't find anything on the web or elsewhere. I'm running tomcat 4.1 and using the j2sdk1.4.1. One thing I noticed that I saw elsewhere is to copy three jar files into the ext directory. jsse.jar, jnet.jar and jcert.jar. The only file I have is the jsse.jar ...

Hi,I need the cyphersuite "TLS_RSA_WITH_NULL_SHA" but JSSE doesn't support that cyphersuite. Does anyone know who supports that cyphersuite? Mayby one that is free?Thanks!/Tobias

hi everybody, im new to this SSL programming. before getting started,i would like to know some fundamentals, ideas and key things abt SSL programming in java. all your valuable suggestions are welcome. Regards -John-

Hi,I am tryign to integrate with one of our partners beta sites using SSL. The server certificate is expired and I get the CertificateExpiredException. Is there a setting on javax.net.ssl which would allow to use expired certificate. If I use any browser ,the browser allows it to go through. So ...

Hi,I'm trying to do a ssl connection (via GLUE) to a remote service. Since upgrade to Java 1.5, I get the following exception:java.rmi.RemoteException: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors ...

Hi guys,I'm trying to set up an ssl client, which doesn't need to check the validity of the server's certificate. I found some source that modifies the trustmanager to accept all_http_connections and I've adjusted it to my needs. My problem is that after the succesfull connection ...

I know not many people answer *this question* as I could see in this forum. I NEED URGENT HELP PLEASE.I am very new to SSL/JSSE and my deadline is on my head!I have a jsp page which when loaded on the client machine should gets its certificates stored in its browser. I have written the code ...

Hello,I'm experiencing problems with establishing SSL connection. Below is the sample code that demonstrates the problem. Connecting to "verisign.com" sever works fine however. Do you have any ideas on what could be the reason of the problem? Should I submit a bug?public class SSHTest {public ...

Hi All,I am having a client app which creates a secure socket connection with the server.Then does a setSoTimeout(90000) and starts reading.When the timeout happens, I would expect a InterruptedIOException to be thrown but instead I receive a -1 which is not as specified in the API doc.If I ...

Hello,I still didn't find a solution to workaround exception on establishing SSH connection with some web servers. Below is the most simple code that throws exception:try {URL url = new URL("https://svn.apache.org/repos/asf");HttpsURLConnection connection = (HttpsURLConnection) ...

I wrote sample code of ssl server & client, and connection established successfully.Buf though client app sends some data to server, server socket reads nothing.I am not convinced of some data being sent to server.please show me the reason.below is source code.server ======= ...

Hi, want to establish the SSL connection with client authentication.I have Server`s certificate in JKS (name 'serv_trust', no password)and my certificate in P12 (client.p12)So, i have some exceptions executing my application:Sorry for my english.java.net.UnknownHostException: ...

I am new to jsse and would appreciate help in learning a technique.I have a certificate given to me by a web service and a password associated with the certificate. The certificate imports easily into the IE and Netscape browsers and they both connect properly to the https web site.I am trying ...

hello,i m doing project on jmf. my project is video conferncing. i m using weblogic8.0,jdk1.4,jsp,applet,webcam by adcom and head phone. but when i m running in localhost in my desktop pc it is showing the exception mentionas : java.net.SocketException: Software caused connection abort: socket ...

Hi, all!I try to use RMI over SSL, but i have (i think so) clear SSL Exception.I have one key with keytool maked. This key is DSA-Key and all settings are default.Server starts and isn't any problems to see. If i try to start a client, i become an Error:error during JRMP connection ...

Hello,trying to connect to a https server I always get this messagemain, SEND TLSv1 ALERT: fatal, description = certificate_unknownmain, WRITE: TLSv1 Alert, length = 2main, called closeSocket()main, handling exception: javax.net.ssl.SSLHandshakeException: ...

Hello, I have made a webapplication, but I don't know anything about security.(MVC - dispatcher, model=mysql, view=jsp/html, controller/disp.=servlets)Should I implement SSL in the servlets?And what does Tomcat have to do with security?(I use Tomcat 4)

Why are the following 2 error messages reported by javac :URLAuth.java:22: cannot find symbolsymbol : class TrustManagerFactorylocation: class URLAuthTrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509", "SunJSSE");^URLAuth.java:22: cannot find symbolsymbol : variable ...

Hi. I抦 trying to connect to a remote server through SSL connection but I抦 getting the error message:javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found.I抦 not sure where is this error coming from. Is it that the tomcat is not finding our ...

hey, I just wanted to know .. when we set clientauth = "true' .. it will make sure for each application using Tomcat 5.x .. if the person requesting the appliation is really who he/she is. But, with this in mind, and when clientauth ="true" .. i just want to have one particular application to ...

Hi,I am using the following code:System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());I also pass -Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocolas argument to the java VM. ...

Can anyone please HELP me with this. I have a client that makes an RPC call through SOAP to a server method over SSL. I have configured tomcat for the ssl communication. My tomcat seems to be behaving alright but I can' t say this with 100% surity though due to this exception. Anyways please ...

Hi,I've coded myself a quaint little client / server app in which the server acts as a telnet server, executing commands passed to it from the client.This works just fine as is, but I suspect the data is easily intercepted.What would my options be for securing this?I tried using SSLSockets, ...

Hi,I a trying to create a server application that accepts TLS connections from a Windows 2003 server. I was told by the Windows people that I have to use the cipher suite TLS_RSA_WITH_3DES_EDE_CBC_SHA for successfull communication. It looks like this cipher suite is not supported in jdk 1.4.2. ...

Hi,I'm hitting into a "Server returned HTTP response code: 403" when trying to access a site requiring a client cert/authentication. The site that I'm trying to access has provided me a client cert (public/private key) to use when accessing the site. The certificate is in .pfx-format. I know ...

Hello All, would it be possible for anyone to listen to the SSL trafic, and decrypt the data, if they have full access of the client computer, BUT they have not been listening to the actual handshake? I am asking this because we are evaluting the use of JSSE in one of our applications, but we ...

Hi all, quick certificate formats exception.I understand that jdk 1.4 only supports read access for .pfx files and thats fine, I can load a client cert and private key in a .pfx file and use it fine. However my problem is that once reading in a .pfx I would like to write it out again, e.g. as a ...

I have a client app that must use SSL to communicate with a dedicated SSL server. I don't yet have a signed certificate (just an untrusted one) installed on the server. To get things to work, I used the genkey command to create a jssecacerts file to place in the ...jre/lib/security directory ...

I got the a problem!I used a common block code to connect to a https server,but I got ClassCastException (HttpsURLConnection) URL.openConnection() works well in a standalone application.but the same code thorws ClassCastException while it run in a servlet thread.I use toString() to print the ...

In the HandShake Protocol, there is a HelloRequest where it allows server to ask a client to restart the SSL handshake negotiation.I cannot find which method in SSLServerSocket that implement this. Guys, any ideas?

Hi all, I hav an urgent requirement for transfering data through HTTPS.But hav no idea how to achieve that,using SSL. For that i have to configure tomcat.What and all i hav to do download and which and all files i hav to alter for configuring the tomcat. I need ur help urgently please help me ...

Hello,Even though there are several topics on this i could not avoid posting another on this. I followed all the steps which where there in the previous discussion of the same topic. My application which is installed in SunOne App server is accessing a https site. I got the trusted CA certs ...

Hi,I want to put some files for download in my webapp. At the same time, I want to protect these files using standard servlet security and ssl. So I added <security-constraint> in my web.xml and configured tomcat to allow SSL connection. Now I got the files protected as I expected. When I ...

HI all!If any body has done work on ISO 8583 and used it in his project so please guide me as i want information about1) Formate of data following ISO 8583 standard i.e how can we read such data using java and how can we creat such data from our java application .2) what are the sucurity ...

This is a workarround to get NIO+SSL with java 1.4:1. You can get a Socket from a SocketChannel with SocketChannel.getSocket() (Always).(SocketChannel created with SocketChannel.open() or ServerSocketChannel.accept())2. Next, you can upgrade the Socket to a SSLSocket ...

I've been reading about SSL tunnels and there seems to be a pretty important point I don't seem to understand. Once the tunnel is in place and the encrypted data is flowing between the two endpoints I understand how the proxy in the middle simply forwards the packets and cannot see what is ...

Hi,I have a working SSLSocket for use with FTP over SSL.I am logged in (with USER and PASS), I am able to issue simple commands (SYST, CWD, PWD, etc) and I am able to retrieve the results from the server.But how do I LIST, STOR and RETR?I know that the FTP server doesn't send data on the same ...

Hi,I have created a client/server application with SSL and have found the following problem.I have made these two tests:1) jdk 1.4.2.03 --> the certificate is expired, I obtain this exception "No trusted certificate found". it's ok2) jdk 1.4.2.06 --> the certificate is expired, no error ...

I am getting SSLHandshakeException that no trusted certificate found.How should I get trusted certificate? I am using keytool utility for creating certificate.I have created certificate which are selfsigned.How should i overcome it?

Hello, i am new to this forum and to J2ME.I am currently in the process of writing a MIDlet to encrypt data using bouncy castle api. I used the bouncy castle tutorial on the IBM website. (IDEA algorithm).Everything is working fine in the WTK 2.1 emulator. (I placed the midp_classes.zip file in ...

Hi all,Im using the function getParameterMap of HttpRequest.This is working fine if I use it on Oracle Application Server..But If using the same on Tomcat it is throwing ClassCastException..My code is like Map requestMap = request.getParameterMap();System.out.println("Map" + requestMap); ...

import java.net.*;import javax.net.*;import javax.net.ssl.*;public class ReadHttpsURL1 {static final int HTTPS_PORT = 443; public static void main(String argv[]) throws Exception { if (argv.length != 1) { System.out.println("Usage: java ReadHttpsURL1 "); System.exit(0);} // Get a Socket ...

I磎 having problems initiliacing the SSL Context when opening a connection with a HTTPS server.In my code i have wrote:private SSLContext sc = null;sc = SSLContext.getInstance("SSL", "SunJSSE");sc.init(null, trustAllCerts,new java.security.SecureRandom());in addittion to other lines.The init ...

Hi,I'm new to Java and i would like to use JDK5.0 update 1 to develop my JSP web site.I've seen that JSSE (for SSL equivalent) has been included into J2SDK 1.4, so i suppose that it is also included into JDK 5.0 update 1.is it correct or not

Hi,I'm running a client, which uses client side authentification via HTTPS. I have stored the private and public key as well as a self signed certificate inside the client program and also added the ceritifcate of the server to the truststore.The server of course has the client's certificate ...

Hi,I've a problem trying to use JSSE with a certificate obtained from a Microsoft Certificate Server (actually the problem happens using SSL with JBoss+Tomcat but it doesn't seem related to the specific JBoss configuration). The certificate I produced uses Microsoft RSA SChannel Cryptographic ...