CERTIFICATE_UNKNOWN

My project requirement is like this:

1.It contains 3 war files which are deployed on different servers.(Weblogic8.1sp3 and jdk1.4).

2.First application has to forward the request to second application and second one will forward the request to third one.U ser can see the third application's home page.

Here user can see only the first application's URL while submitting the request and the third application's URL only and not second application's URL. (Because in the background second application will forward the request to third).

3.I have used Apache's HttpClient and PostMethod to forward the request to second application.

4.Application wokrs fine with HTTP but with HTTPS i am facing some problem. Please take a look at the following stack trace.<Jul 3, 2007 9:45:01 AM IST> <Debug> <TLS> <000000> <16515784 Rethrowing InterruptedIOException>

JDK Protocol Handlers and Security Providers:

java.protocol.handler.pkgs - weblogic.utils|weblogic.utils|weblogic.net

provider[0] - SUN - SUN (DSA key/parameter generation; DSA signing; SHA-1, MD5 digests; SecureRandom; X.509 certificates; JKS keystore; PKIX CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores)

provider[1] - SunJSSE - Sun JSSE provider(implements RSA Signatures, PKCS12, SunX509 key/trust factories, SSLv3, TLSv1)

provider[2] - SunRsaSign - SUN's provider for RSA signatures

provider[3] - SunJCE - SunJCE Provider (implements DES, Triple DES, AES, Blowfish, PBE, Diffie-Hellman, HMAC-MD5, HMAC-SHA1)

provider[4] - SunJGSS - Sun (Kerberos v5)

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <Filtering JSSE SSLSocket>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <SSLIOContextTable.addContext(ctx): 31253613>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <SSLSocket will be Muxing>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <SSLIOContextTable.findContext(is): 18407750>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <isMuxerActivated: false>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <31665366 readRecord()>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <31665366 SSL Version 2 with no padding>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <31665366 SSL3/TLS MAC>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <31665366 received SSL_20_RECORD>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: ClientHelloV2>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <write HANDSHAKE offset = 0 length = 58>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <write HANDSHAKE offset = 0 length = 503>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <write HANDSHAKE offset = 0 length = 4>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <isMuxerActivated: false>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <31665366 readRecord()>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <31665366 SSL3/TLS MAC>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <31665366 received ALERT>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <NEW ALERT: com.certicom.tls.record.alert.Alert@30fb71 Severity: 2 Type: 46

java.lang.Throwable: Stack trace

at weblogic.security.utils.SSLSetup.debug(SSLSetup.java:265)

at com.certicom.tls.record.alert.Alert.><init>(Unknown Source)

at com.certicom.tls.record.alert.AlertHandler.handleAlertMessages(Unknown Source)

at com.certicom.tls.record.ReadHandler.interpretContent(Unknown Source)

at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)

at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)

at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown Source)

at com.certicom.net.ssl.CerticomContextWrapper.forceHandshakeOnAcceptedSocket(Unknown Source)

at weblogic.t3.srvr.SSLListenThread$1.execute(SSLListenThread.java:522)

at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:219)

at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:178)

>

sun.security.validator.ValidatorException: No trusted certificate found

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <write APPLICATION_DATA offset = 0 length = 145>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <Alert received from peer, notifying peer we received it: com.certicom.tls.record.alert.Alert@30fb71>

<Jul 3, 2007 9:45:17 AM IST> <Warning> <Security> <BEA-090485> <CERTIFICATE_UNKNOWN alert was received from localhost - 127.0.0.1. The peer has an unspecified issue with the certificate. SSL debug tracing should be enabled on the peer to determine what the issue is.>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <close(): 31665366>

<Jul 3, 2007 9:45:17 AM IST> <Debug> <TLS> <000000> <SSLIOContextTable.removeContext(ctx): 31253613>

I have deplyed all 3 wars in my local machine for testing.

If any body helps in this it will be great.

Thanks in advance.

[6380 byte] By [kalyanakumara] at [2007-11-27 9:28:53]
# 1

> sun.security.validator.ValidatorException: No trusted certificate found

The client of whatever exchange contains that doesn't trust the server certificate it was sent during the SSL handshake. The server certificate or that of one of its signers needs to be exported from the server's keystore and imported into that client's truststore, as explained in the Javadoc/Guide to Features/Security/JSSE Reference Guide.

Note that here 'client' may be one the intermediate servers.

ejpa at 2007-7-12 22:35:31 > top of Java-index,Security,Other Security APIs, Tools, and Issues...
# 2
Can you please explain the solution. How can I handle technically?
kalyanakumara at 2007-7-12 22:35:31 > top of Java-index,Security,Other Security APIs, Tools, and Issues...
# 3
It's all there in the reference I gave you.That's why I gave it.
ejpa at 2007-7-12 22:35:31 > top of Java-index,Security,Other Security APIs, Tools, and Issues...