Hi All,

I might have missed something in the examples, but if we install a certificate by right clicking on it in explorer and choosing "install certificate", how do we retrieve this from the keystore? I assumed that it's by alias, but the alias method returns something like:

AuthRoot|AEj403sVP26ieYwyPvTzGKViSp4=

And I'm not sure how to determine the alias of the certificate that I just imported. I'd greatly appreciate any suggestions since I'm new to security oriented programming.

Hi Tommy,

Thanks for your kind advice.
I opened the log, here comes the exception popped up in command console.
It shows the failure occurs when 'checkServerTrusted'.
I tried to rewrite SSL plugin to get more detailed information, but always fail to load it. As it is mention in JCAPI java doc. The description of interface of JCAPIPlugin is 'All plug-ins in JCAPI must implement this interface. Currently, plug-ins cannot be created by external parties. '
Does it means I can not program a customized SSL plugin .

Timeout guard, handling exception: javax.net.ssl.SSLHandshakeException: java.sec
urity.cert.CertificateException: Untrusted certificate chain.
javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Untrusted certificate chain.
at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(DashoA6275)

at com.octasoft.mib.net.JCAPISSLSocketFactory.createSocket(Unknown Source)
at org.apache.commons.httpclient.HttpConnection$1.doit(HttpConnection.java:660)
at org.apache.commons.httpclient.HttpConnection$SocketTask.run(HttpConnection.java:1291)
at java.lang.Thread.run(Thread.java:536)
Caused by: java.security.cert.CertificateException: Untrusted certificate chain.

at com.pheox.jcapi.plugins.ssl.SSLTrustManager.checkServerTrusted(Unknown Source)
at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(
DashoA6275)
... 10 more

Hello,

I am configuring the JCAPI as a provider for a SUN 1.4.2_09 JVM. I am then configuring Tomcat 5.5.9 to use this JVM. When bootstrapping Tomcat the following error is generated:

Caused by: java.security.ProviderException: Verification of JCAPI JAR file integrity failed.
Reason: X.509 not found
at com.pheox.jcapi.d.g(Unknown Source)
at com.pheox.jcapi.JCAPIProvider.init(Unknown Source)
at com.pheox.jcapi.JCAPIProvider.<clinit>(Unknown Source)

any ideas? Thank you.