Hallo,
 
error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
 
probably means that your client does not send its certificate to server, but server would to get it. In order to get you client to send certificate you would probably have to
 
1) read jsse manuals
2) after you finished with jsse manuals try to use following properties
 
javax.net.ssl.keyStoreType

javax.net.ssl.keyStorePassword

javax.net.ssl.keyStore

javax.net.ssl.trustStore

javax.net.ss.trustStorePassword

3) You would probably also have to figure out how to use property

sun.ssl.keymanager.type

Regards, Vadim Tarassov.

-----Ursprüngliche Nachricht-----
Von: Jason Jesso [mailto:[EMAIL PROTECTED]]
Gesendet: Dienstag, 20. August 2002 21:05
An: [EMAIL PROTECTED]
Betreff: sslv3 alert certificate unknown

I have a ssl server written in C that uses openssl.  I have a ssl client in Java that uses JSSE.

On the server side SSL_accept fails and the error message is:

error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown

How can I fix this?

My client code is:

===================
import java.io.*;
import java.net.*;

import javax.net.*;
import javax.net.ssl.*;

public class SSLSimpleClient {

    public static void main(String[] args) throws Exception {
        SocketFactory sf = SSLSocketFactory.getDefault();
        Socket s = sf.createSocket(args[0], Integer.parseInt(args[1]));

        BufferedReader br = new BufferedReader(
                                    new InputStreamReader(
                                        s.getInputStream()));
        PrintWriter pw = new PrintWriter(s.getOutputStream());
        System.out.println("Who is Sylvia?");
        pw.println("Who is Sylvia?");
        pw.flush();
        System.out.println(br.readLine());
        s.close();
    }
}
======================

-- 
<jason/>
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Reply via email to