javax.net.ssl.SSLHandshakeException: certificate expired

None of the below is worked, RAD 6.0 already came with this fix patch installed, at least patch-installer tole me that.

looked at traces using–

Debugging
By configuring through the javax.net.debug system property, JSSE provides the following dynamic debug tracing: -Djavax.net.debug=true.

Environment
———–
RAD 6.0

Websphere Test Environment

WebSphere Platform 5.1 [BASE 5.1.1 a0426.01] [JDK 1.4.2 cn1420-20040626]
Host Operating System is Windows 2000, version 5.0 build 2195 Service Pack 4
Java version = J2RE 1.4.2 IBM J9 build 20040610 (JIT enabled), Java Compiler = j9jit21, Java VM name = IBM J9SE VM

Problem
——-

Can’t get connection to HTTPS url using httpclient, getting exception
java.net.SocketException: Socket is not connected

Ran the troubleshooting test provided by httpclient
http://jakarta.apache.org/commons/httpclient/sslguide.html

getting

javax.net.ssl.SSLHandshakeException: certificate expired

According to IBM

PQ77261: Default certificates will expire on 01/15/2004.
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg1PQ77261

And Upgrading WebSphere Application Server V5.1 Test Environment to V5.1.1
http://www-1.ibm.com/support/docview.wss?rs=495&context=SSGTPH&uid=swg24007794

Downloaded 5.1.1.10: WebSphere Application Server V5.1.1 Cumulative Fix 10 for Windows (over 200MB)
http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg24012012

APAR status
Closed as program error.

Error description
When the certificates expire, the following message is
received:


[8/7/04 12:42:29:305 CDT] 649778c2 ORBRas X
com.ibm.CORBA.iiop.IIOPConnection send
(IIOPOutputStream, OneWay)
P=540553:O=0:CT The following exception was logged
javax.net.ssl.SSLHandshakeException: certificate expired

Local fix

Problem summary
****************************************************************
* USERS AFFECTED: All WebSphere Application Server users who *
* have enabled security and have not *
* configured new SSL Trust and Key stores. *
****************************************************************
* PROBLEM DESCRIPTION: The default certificates will expire *
* on 1/15/2004. *
****************************************************************
* RECOMMENDATION: *
****************************************************************
The default certificates will expire on 1/15/2004. This will
prevent servers from initializing and will cause servers to
stop operating if already started when the certificates
expire.

The following error messages will appear in the tracefile
during server startup:


[10/10/04 16:58:12:557 CDT] 6434c6c1 ORBRas
X com.ibm.CORBA.iiop.IIOPConnection send(IIOPOutputStream,
OneWay) P=484786:O=0:CT The following exception was logged
javax.net.ssl.SSLHandshakeException: certificate expired
at com.ibm.jsse.bd.a(Unknown Source)
at com.ibm.jsse.b.a(Unknown Source)
at com.ibm.jsse.b.write(Unknown Source)
....

[10/10/04 16:58:12:757 CDT] 6434c6c1 AdminServer
X WSVR0009E: Error occurred during startup
java.lang.RuntimeException: com.ibm.ejs.EJSException: Could
not register with Location Service Daemon;
nested exception is:
java.lang.ClassCastException
at com.ibm.ws.runtime.Server.initializeOrb
(Server.java:1464)
at com.ibm.ws.runtime.Server.initializeRuntime0
(Server.java:941)
at com.ibm.ejs.sm.server.ManagedServer.
initializeRuntime0(ManagedServer.java:408)
.....

Problem conclusion
New certificates were created that will not expire until 2021.
It is important to note that these certificates (or the
original ones) should not be used if IIOP over SSL and HTTPS
communications need to be secure.
Temporary fix
Comments
APAR information
APAR number PQ77261
Reported component name WEBSPHERE AE AI
Reported component ID 5630A2200
Reported release 400
Status CLOSED PER
PE NoPE
HIPER NoHIPER
Submitted date 2003-08-07
Closed date 2003-09-29
Last modified date 2003-09-29

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Modules/Macros
security

SRLS

Fix information

Applicable component levels
R400 PSY UP

Advertisements