Deleted A Certificate - Now Getting An Error... Please Help!

Hi I'm having some problems starting Tomcat after I've deleted a certificate and would appreciate any help you could offer. I'm a newbie here, so please bear with me.

In the server.xml file of Slide I uncommented the 'Define a SSL Coyote HTTP/1.1 Coyote on port 8443' block and changed this port number from 8443 to 443.I also changed the redirect port number in the non-SSL block from 8443 to 443.

In the web.xml file of Slide I added the following block to force the use of HTTPS:

<user-data-constraint>

<description>Constrain the entire application to force use of HTTPS</description>

<transport-guarantee>CONFIDENTIAL</transport-guarantee>

</user-data-constraint>

I was then running into issues of running my application because of the certificate of authentication, so I deleted it from the keystore and tried to start Tomcat again (was able to start Tomcat when the certificate existed prior to deleting it). Now I am getting the following error:

SEVERE: Endpoint [SSL: ServerSocket[addr=0.0.0.0/0.0.0.0,port=0,localport=443]]

ignored exception: java.net.SocketException: SSL handshake errorjavax.net.ssl.SS

LException: No available certificate or key corresponds to the SSL cipher suites

which are enabled.

java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLException: No avai

lable certificate or key corresponds to the SSL cipher suites which are enabled.

Any help or directions you could provide would be greatly appreciated.

-Jeanna

[1593 byte] By [JGeiera] at [2007-10-3 3:49:22]
# 1
You still need a private-key certificate in the keystore. Why did you delete it?
ejpa at 2007-7-14 21:46:34 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 2

Like I said, newbie here, so please bear with me. =)

I deleted it because I was trying to get around having the pop-up for the certificate appear, so I thought: no keyfile, no certificate...

When I enable SSL and attempt to build my project, I am getting an error that the program cannot find the files: "java.io.IOException: Resource, https://localhost/slide/files/Documents/, does not exist!", although they are out there. I'm thinking that the certificate pop-up appears before it can actually go and look for the files, so that is what is causing the error.

And as I pointed out in my original post, when trying to connect using the Slide client run.bat, the following error

is occurring:

[ Slide ] $ open https://localhost/slide/files

connect https://localhost/slide/files/

Error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[ Slide ] $

Thanks for replying and any additional help!

JGeiera at 2007-7-14 21:46:34 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 3

The popup for the certificate appears because it isn't trusted, i.e. it isn't signed by a CA trusted by the browser. Fix that (by getting a signed cert) and you've fixed everything.

SSL will not run in most cases without a server-side certificate, and if it does run (can be configured that way) it is[ i]not secure. Discussed in RFC 2246..

ejpa at 2007-7-14 21:46:34 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 4

Thanks for the info.

I was using a signed certificate (test cert from Verisign); however the issue was that the name on the certificate and the name of the server I was connecting to were different, so it wasn't a 'trusted' certificate. I fixed this by changing the name on the certificate to 'localhost', then it was a trusted, signed certificate.

However, that did not fix my problems. =( If only it were that simple....

I am still unable to build my project (getting same error as described in original post) and am still getting the same error when trying to connect using the Slide client:

[ Slide ] $ open https://localhost/slide/files

connect https://localhost/slide/files/

Error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[ Slide ] $

-Jeanna

JGeiera at 2007-7-14 21:46:34 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...