SSLHandShakingException :Certificate expired

Hitechies

I have and SDK of a third party reporting tool Cognos, which is used to coonect to that server. for accessing the server I had to first logon to the server and query it with some string, when I used HTTP (non-secure) then it is working fine, But when I used HTTPS to connect to it. Then it is giving me

SSLHandShakingException :Certificate expired

the stack trace is as follows

{http://xml.apache.org/axis/}stackTrace: javax.net.ssl.SSLHandshakeException: certificate expired

at com.ibm.jsse.bg.a(Unknown Source)

at com.ibm.jsse.bg.startHandshake(Unknown Source)

at org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:224)

at org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:157)

at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:114)

at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:71)

at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:150)

at org.apache.axis.SimpleChain.invoke(SimpleChain.java:120)

at org.apache.axis.client.AxisClient.invoke(AxisClient.java:180)

at org.apache.axis.client.Call.invokeEngine(Call.java:2564)

Now since this time my local server is a client to Cognos server making request to it through JSP pages. So what should I do in order to overcoome this problem of HandShaking certificate bla bla.....

I am using WSAD 5.1.2 (Web sphere IDE IBM) for developing JSP pages.

Please help I am baffling it with for last 2 days

Thanks

[1591 byte] By [Bunteea] at [2007-10-2 18:34:12]
# 1
I too am facing the same problem using Axis with Websphere App Servre 5.1 . Does anybody have any solution. Is the no way to use Axis with WebSphere
JP2006a at 2007-7-13 19:55:48 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 2
IBM's implementation of JSSE checks for certificate expiry. Sun's doesn't, it leaves that up to the user.If the server's certificate has expired, tell the people who run the server. At the moment the server can't be trusted.
ejpa at 2007-7-13 19:55:48 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 3

Actually, the certificate is not expired. They recently changed the certificate on the server I am trying to connect to. And I think its since the change I am unable to run my application. How do we enable WebSphere to download and use the latest certificate. How do I delete the old certificate from WebSphere certificate store and import / use the new one.

Thanks,

JP

JP2006a at 2007-7-13 19:55:48 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 4

You probably need to delete the old certificate from the server's keystore.

If that's already been done maybe you need a more up-to-date client truststore.

Anyway check both for expired certificates and take the appopriate action as above.

You can use keytool for this at the client, and at the WebSphere server too unless it uses some other thing.

ejpa at 2007-7-13 19:55:48 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 5
Did you solve this problem? I have same problem as well...
Freyaa at 2007-7-13 19:55:48 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 6

I am trying to use AXIS in WebSphere 6.0 and found the same problem to access the other end. The other end had the expired certificate and now they have removed it, but still I can't access. It's now simple http call. Do I need to remove from my key store? I don't know even how to remove the keys from the key store. Or it could be problem for AXIS plugin into websphere?

feraria at 2007-7-13 19:55:48 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 7
The problem is at the server end. Tell them. There is nothing useful you can do at the client end.
ejpa at 2007-7-13 19:55:48 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 8
Can I use sun's JSSE instead of IBM's implementation of JSSE to bypass the problem for Certificate expired. Does it worth?
jp2007a at 2007-7-13 19:55:48 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...