JCE 1.2.2 - "Cannot set up certs for trusted CAs"
4 Message(s) by 2 Author(s) originally posted in java security
| From: nishant80 |
Date: Tuesday, October 24, 2006
|
Hi,
I am using JCE 1.2.2 for one of my applications and got the following
error today:
Exception in
thread "main" JAVA.lang.ExceptionInInitializerError:
JAVA.lang.SecurityException: Cannot set up certs for
trusted CAsI had got a similar error last year (Jul 2005) when I was using JCE
1.2.1
That time, I had come to know that the JCE 1.2.1 Signing Certificate
was supposed to expire on July 27, 2005
(
http://JAVA.sun.com/products/jce/index-122.html)
Hence, as per the recommendation from JAVA.sun.com, I had upgraded JCE
to 1.2.2 which solved the problem.
The JCE 1.2.2
FAQ (
http://JAVA.sun.com/products/jce/jce122_faq.html)
says:
"The
validation code which checked for certificate expiration was
*ONLY* used in JCE 1.2.1. The validity period check *WAS REMOVED* from
JCE 1.2.2 and all successive
J2SE releases. Hence these JCE versions do
not check the expiration
date , and won't stop working after the
certificate validity period has expired."
But to my surprise, today (Oct 23, 2006) I got the same error as last
year.
I am now clueless as to how this can be fixed. Does JCE 1.2.2 have a
BUG?
Ideas/Suggestions/Solutions are most welcome. Please advise.Thnx,
Nishant
| From: CabinTrips.com |
Date: Wednesday, October 25, 2006
|
We're having the same issue. Please let me know if you find a
fix/workaround.
Thanks,
Julian
wrote in message:
Hi,
I am using JCE 1.2.2 for one of my applications and got the following
error today:
Exception in thread "main" JAVA.lang.ExceptionInInitializerError:
JAVA.lang.SecurityException: Cannot set up certs for
trusted CAs
I had got a similar error last year (Jul 2005) when I was using JCE
1.2.1
That time, I had come to know that the JCE 1.2.1 Signing Certificate
was supposed to expire on July 27, 2005
(http://JAVA.sun.com/products/jce/index-122.html)
Hence, as per the recommendation from JAVA.sun.com, I had upgraded JCE
to 1.2.2 which solved the problem.
The JCE 1.2.2 FAQ (http://JAVA.sun.com/products/jce/jce122_faq.html)
says:
"The validation code which checked for certificate expiration was
*ONLY* used in JCE 1.2.1. The validity period check *WAS REMOVED* from
JCE 1.2.2 and all successive J2SE releases. Hence these JCE versions do
not check the expiration date, and won't stop working after the
certificate validity period has expired."
But to my surprise, today (Oct 23, 2006) I got the same error as last
year.
I am now clueless as to how this can be fixed. Does JCE 1.2.2 have a
BUG?
Ideas/Suggestions/Solutions are most welcome. Please advise.
Thnx,
Nishant
| From: CabinTrips.com |
Date: Wednesday, October 25, 2006
|
Have you verified that you do not have both jce1_2_1.jar and
jce1_2_2.jar in the same directory? I know the
Sun site does not
specify, but this may cause problems. Seems to have fixed it for us.
However, I did see an interesteing post:
http://archives.JAVA.sun.com/cgi-bin/wa?A2=ind0609&L=JAVA-security&F=&S=&P=2225
but could not verify the expiratation date with:
jarsigner -verify -certs -verbose jce1_2_2.jar
Good luck!
Julian
wrote in message:
Hi,
I am using JCE 1.2.2 for one of my applications and got the following
error today:
Exception in thread "main" JAVA.lang.ExceptionInInitializerError:
JAVA.lang.SecurityException: Cannot set up certs for
trusted CAs
I had got a similar error last year (Jul 2005) when I was using JCE
1.2.1
That time, I had come to know that the JCE 1.2.1 Signing Certificate
was supposed to expire on July 27, 2005
(http://JAVA.sun.com/products/jce/index-122.html)
Hence, as per the recommendation from JAVA.sun.com, I had upgraded JCE
to 1.2.2 which solved the problem.
The JCE 1.2.2 FAQ (http://JAVA.sun.com/products/jce/jce122_faq.html)
says:
"The validation code which checked for certificate expiration was
*ONLY* used in JCE 1.2.1. The validity period check *WAS REMOVED* from
JCE 1.2.2 and all successive J2SE releases. Hence these JCE versions do
not check the expiration date, and won't stop working after the
certificate validity period has expired."
But to my surprise, today (Oct 23, 2006) I got the same error as last
year.
I am now clueless as to how this can be fixed. Does JCE 1.2.2 have a
BUG?
Ideas/Suggestions/Solutions are most welcome. Please advise.
Thnx,
Nishant
| From: nishant80 |
Date: Friday, November 03, 2006
|
Hi Julian,
Yes, that was the exact cause of this problem! -- came to know abt it
wen the SUN
support guys replied to my
query .
On my server, there were 2 older JCE libraries:
1) SUN JCE 1.2.1 and
2)
IBM JCE
I removed the old libraries and it solved the problem.
I also had gone thru the
link provided by you on the SUN
website which
enforced my belief that 1.2.2 certificate wouldn't expire ever.
Looks like we went about solving our problems in the exact same manner
:)
Thank you for replying to my query and then doing the follow-up.
Nishant.
Next Message: New lightweight block cipher algorithm