how to bypass the CertificateExpiredException exception?

[Ahmed Moustafa]

Hi All,

I have a test certificate why has already expired. Is there a way to
bypass the CertificateExpiredException exception?

Thanks in advance.

 

[Roedy Green]

I have a test certificate why has already expired. Is there a way to
bypass the CertificateExpiredException exception?

create a new test certificate.

 

[Ahmed Moustafa]

create a new test certificate.

All the test certificates, that apache creates, are already expired!

 

[Roedy Green]

All the test certificates, that apache creates, are already expired!

Try downloading the latest Apache. If that does not work, tell the
authors about the problem.

 

[Brian Palmer]

All the test certificates, that apache creates, are already expired!

What are these certificates for? And how exactly are you creating
these certificates? By test certificate, do you mean self-signed
certificate, or is this using some CA's demo certificates?

Have you tried creating a self-signed certificate with openssl and
then configuring the apache (either apache-ssl or with mod_ssl) httpd
to use those certificates?

 

[Ahmed Moustafa]

I have a test certificate why has already expired. Is there a way to

create a new test certificate.

I have done that and passed the expired certificate issue. Now, I am
getting "javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: No trusted certificate found".

In a browser, I can accept such a certificate but how can I accept in Java?

 

[Brian Palmer]

I have done that and passed the expired certificate issue. Now, I am
getting "javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: No trusted certificate
found".


In a browser, I can accept such a certificate but how can I accept in Java?

You have to import the signing authority into your cacerts file

http://mindprod.com/jgloss/cacerts.html

(actually, I suspect you can get away with adding a keystore to your
java policy file, but if you have permission to add it to the cacerts
file, that's probably easier)

 

[Ahmed Moustafa]

I have a test certificate why has already expired. Is there a way

You have to import the signing authority into your cacerts file

http://mindprod.com/jgloss/cacerts.html

(actually, I suspect you can get away with adding a keystore to your
java policy file, but if you have permission to add it to the cacerts
file, that's probably easier)

Could you please tell me how I import it?

 

[Brian Palmer]

Could you please tell me how I import it?

Roedy has an example in the keytool entry of his glossary:
http://mindprod.com/jgloss/keytool.html

keytool -import -keystore c:\j2sdk1.4.2_01\jre\lib\security\cacerts
-alias phony -file phonycert.cer

(and, optional, use the -trustcacerts flag). See also
http://docs.sun.com/source/817-3723-10/as2_certificate.html