Thanks.
Eric Speake
Web Systems Administrator
O'Reilly Auto Parts
(417) 862-2674 Ext. 1975
From: Viktor Dukhovni <openssl-us...@dukhovni.org>
To: openssl-users@openssl.org, owner-openssl-us...@openssl.org
Date: 02/17/2014 02:44 PM
Subject: Re: CA cert issue
Sent by: owner-openssl-us...@openssl.org
On Mon, Feb 17, 2014 at 02:11:39PM -0600, espe...@oreillyauto.com wrote:
> The applications use data connection pools to connect to the iSeries
> servers we use. Allof the connections use hibernate
>
(<app_name>.hibernate.connection.url=jdbc:as400://<host>;<libraries>;<options>;
> In the options we add secure=true.
This looks like "Java". Java does not use OpenSSL. It has a Java
keystore. You need to add trusted roots to the relevant Java
keystore. This is the wrong list for help with that. Perhaps some
kind soul will post the right recipe here anyway, but you should
look at the relevant Java documentation or Java help forum.
> Caused by: sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException:
unable
> to find valid certification path to requested target
Yep, Java. OpenSSL is the tool you used to generate the certs and
keys, but it plays no role in how Java performs certificate chain
verification.
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
--
This message has been scanned for viruses and dangerous content,
and is believed to be clean.
Message id: 1717D60142E.A20D9
This communication and any attachments are confidential, protected by
Communications Privacy Act 18 USCS ยง 2510, solely for the use of the intended
recipient, and may contain legally privileged material. If you are not the
intended recipient, please return or destroy it immediately. Thank you.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
