Re: PostgreSQL + SSL - sun.security.validator.ValidatorException

Ok,
I'm nearly there but not yet.....

I can ascertain what is in my keystore by doing:

$ keytool -list

Enter keystore password: mypassword

Keystore type: jks
Keystore provider: SUN

Your keystore contains 1 entry

beyarecords.com, Dec 7, 2004, keyEntry,
Certificate fingerprint (MD5):
32:44:5B:78:85:BA:BA:96:C1:CF:DF:A2:6A:0E:78:CB

I specify properties in jboss like so:

javax.net.ssl.keyStore=/library/java/home/lib/security/cacerts
javax.net.ssl.keyStorePassword=changeit
javax.net.ssl.keyStoreType= JKS

The error message I get back is:

sun.security.validator.ValidatorException: No trusted certificate found

If I say :
javax.net.ssl.keyStore=/library/java/home/lib/security/cacerts/
beyarecords.com
javax.net.ssl.keyStorePassword=mypassword

I get the following error:

java.net.SocketException: Default SSL context init failed: null

I am of the understanding that once a certificate has been imported
into the keystore and associated via an alias(beyarecords.com) with a
key (32:44:5B:78:85:BA:BA:96:C1:CF:DF:A2:6A:0E:78:CB) that it is then
trusted? What am I missing here?

regards

Andrew

On 7 Dec 2004, at 16:37, Vadim Nasardinov wrote:

> On Tuesday 07 December 2004 07:38, Andrew M wrote:
>> I need to explain my setup here. I'm running a website via Jboss
>> application server.
> ...
>> I launch jboss like so:
>>
>>> cd /jboss/bin
>> /jboss/bin> ./run.sh
>>
>> So how do I tell the driver where to find the keystore in this
>> instance, as I am not running a stand alone java application?
>
> JBoss's run.sh likely provides a way to pass command-line options to
> the JRE. This is needed so can you specify the maximum heap and stack
> size, among other things. The standard way of doing this is to allow
> the user to set an enviroment variable called JAVA_OPTS or some
> such. So, once you know what this variable is named in your
> particular case, you should be able to do something along the
> following lines:
>
>
> $ cd /jboss/bin
> $ export
> JAVA_OPTS="-Djavax.net.ssl.trustStore=/library/java/home/lib/security/
> cacert"
> $ ./run.sh
>
> The script is then responsible for splicing this additional option
> onto the command line that it uses to invoke java.
>
> See
> http://www.google.com/search?q=jboss+run.sh+JAVA_OPTS&btnI=
>
>
>