Sagewire Logo

JCE 1.2.2 - "Cannot set up certs for trusted CAs"

4 Message(s) by 2 Author(s) originally posted in java security


From: nishant80 Date:   Tuesday, October 24, 2006
Hi,

I am using JCE 1.2.2 for one of my applications and got the following
error today:

Exception in thread "main" JAVA.lang.ExceptionInInitializerError:
JAVA.lang.SecurityException: Cannot set up certs for

trusted CAsI had got a similar error last year (Jul 2005) when I was using JCE
1.2.1
That time, I had come to know that the JCE 1.2.1 Signing Certificate
was supposed to expire on July 27, 2005

(http://JAVA.sun.com/products/jce/index-122.html)

Hence, as per the recommendation from JAVA.sun.com, I had upgraded JCE
to 1.2.2 which solved the problem.

The JCE 1.2.2 FAQ (http://JAVA.sun.com/products/jce/jce122_faq.html)
says:
"The validation code which checked for certificate expiration was
*ONLY* used in JCE 1.2.1. The validity period check *WAS REMOVED* from
JCE 1.2.2 and all successive J2SE releases. Hence these JCE versions do
not check the expiration date , and won't stop working after the
certificate validity period has expired."

But to my surprise, today (Oct 23, 2006) I got the same error as last
year.
I am now clueless as to how this can be fixed. Does JCE 1.2.2 have a
BUG?

Ideas/Suggestions/Solutions are most welcome. Please advise.Thnx,
Nishant


From: CabinTrips.com Date:   Wednesday, October 25, 2006
We're having the same issue. Please let me know if you find a
fix/workaround.

Thanks,
Julian
wrote in message:
Hi,
I am using JCE 1.2.2 for one of my applications and got the following
error today:
Exception in thread "main" JAVA.lang.ExceptionInInitializerError:
JAVA.lang.SecurityException: Cannot set up certs for
trusted CAs
I had got a similar error last year (Jul 2005) when I was using JCE
1.2.1
That time, I had come to know that the JCE 1.2.1 Signing Certificate
was supposed to expire on July 27, 2005
(http://JAVA.sun.com/products/jce/index-122.html)
Hence, as per the recommendation from JAVA.sun.com, I had upgraded JCE
to 1.2.2 which solved the problem.
The JCE 1.2.2 FAQ (http://JAVA.sun.com/products/jce/jce122_faq.html)
says:
"The validation code which checked for certificate expiration was
*ONLY* used in JCE 1.2.1. The validity period check *WAS REMOVED* from
JCE 1.2.2 and all successive J2SE releases. Hence these JCE versions do
not check the expiration date, and won't stop working after the
certificate validity period has expired."
But to my surprise, today (Oct 23, 2006) I got the same error as last
year.
I am now clueless as to how this can be fixed. Does JCE 1.2.2 have a
BUG?
Ideas/Suggestions/Solutions are most welcome. Please advise.
Thnx,
Nishant






From: CabinTrips.com Date:   Wednesday, October 25, 2006
Have you verified that you do not have both jce1_2_1.jar and
jce1_2_2.jar in the same directory? I know the Sun site does not
specify, but this may cause problems. Seems to have fixed it for us.
However, I did see an interesteing post:

http://archives.JAVA.sun.com/cgi-bin/wa?A2=ind0609&L=JAVA-security&F=&S=&P=2225

but could not verify the expiratation date with:
jarsigner -verify -certs -verbose jce1_2_2.jar

Good luck!
Julian

wrote in message:
Hi,
I am using JCE 1.2.2 for one of my applications and got the following
error today:
Exception in thread "main" JAVA.lang.ExceptionInInitializerError:
JAVA.lang.SecurityException: Cannot set up certs for
trusted CAs
I had got a similar error last year (Jul 2005) when I was using JCE
1.2.1
That time, I had come to know that the JCE 1.2.1 Signing Certificate
was supposed to expire on July 27, 2005
(http://JAVA.sun.com/products/jce/index-122.html)
Hence, as per the recommendation from JAVA.sun.com, I had upgraded JCE
to 1.2.2 which solved the problem.
The JCE 1.2.2 FAQ (http://JAVA.sun.com/products/jce/jce122_faq.html)
says:
"The validation code which checked for certificate expiration was
*ONLY* used in JCE 1.2.1. The validity period check *WAS REMOVED* from
JCE 1.2.2 and all successive J2SE releases. Hence these JCE versions do
not check the expiration date, and won't stop working after the
certificate validity period has expired."
But to my surprise, today (Oct 23, 2006) I got the same error as last
year.
I am now clueless as to how this can be fixed. Does JCE 1.2.2 have a
BUG?
Ideas/Suggestions/Solutions are most welcome. Please advise.
Thnx,
Nishant






From: nishant80 Date:   Friday, November 03, 2006
Hi Julian,

Yes, that was the exact cause of this problem! -- came to know abt it
wen the SUN support guys replied to my query .

On my server, there were 2 older JCE libraries:
1) SUN JCE 1.2.1 and
2) IBM JCE

I removed the old libraries and it solved the problem.

I also had gone thru the link provided by you on the SUN website which
enforced my belief that 1.2.2 certificate wouldn't expire ever.

Looks like we went about solving our problems in the exact same manner
:)

Thank you for replying to my query and then doing the follow-up.

Nishant.



Next Message: New lightweight block cipher algorithm



Programming | Sports | Autos

copyright 2006
Valid XHTML 1.0 Transitional