"Jihwan Kim" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] >Thanks Bill, > >1. My client doesn't throw an exception if the client and server's cert is >identical and both are expired. If only one of them is expired, it thorws >exception. I want to detect the expired situation even if both side are >expired. >
Well, you could call HttpsURLConnection.getServerCertificates() and check :). But if your connection is being masked by Axis, this probably won't work. >2. WebLogic detects expired cert. So, it means JSSE doesn't do this but >does WebLogic have its own code to detect this? > Probably. It's not too bad of an idea, actually (and not too hard to do :). When I can find where I put my spare cycles, I might even add it to Tomcat :). >Thanks, --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
