Issue - using sample code provided with TSIK2.0

Hi,

 

I was able to solve this error. The actual reason is older version of jdk.

 

The code works fine with the newer version of java (jdk 1.4.2_10).

 

HI Vishal,

 

1) The line numbers in your stack trace don't match current

source. Did you change the source? If so, can you post your

changes?

 

2) Can you post output from this?

keytool -v -list -keystore j2sdk1.4.1_02\jre\lib\security\cacerts

 

3) Also, if you have it, try with jdk 1.4.2 and see if there is

a difference?

 

Thanks,

Hans

 

 

---

From: Malhotra, Vishal [mailto:vmalhotraverisign.com]
Sent: Wednesday, February 22, 2006 10:39 PM
To: tsik-devws.apache.org
Subject: Issue - using sample code provided with TSIK2.0

Hi,

 

While testing the sample code of TrustVerifier (SSLAndHttpsTests.java) provided with TSIK2.0 (got it from incubator.apache.org/tsik), I got the following error.

 

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: CA certificate does not include basic constraints extension

      at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275)

      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(DashoA6275)

      at SSLAndHttpsTests.testSSL(SSLAndHttpsTests.java:213)

      at SSLAndHttpsTests.runTest(SSLAndHttpsTests.java:114)

      at SSLAndHttpsTests.main(SSLAndHttpsTests.java:81)

Caused by: java.security.cert.CertificateException: CA certificate does not include basic constraints extension

      at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275)

      at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(DashoA6275)

      at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(DashoA6275)

      ... 9 more

Exception in thread "main"

 

I am using “jdk 1.4.1_02”. Can this be a reason for this error?

 

The trusted certs are present in the java keystore ().

 

What can be the reason for this error?

 

Regards,

Vishal.