javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Could not find trusted certificate

Hi,

I have using  SOAP client which can talk upto 10 servers at the same time. (this is over https).

I am using Apache Axis, JDK1.4.02, weblogic 8.1 on Linux redhat 9.1.

I have a truststore where all the certificates are stored. I use following code in the client for ssl setup:

     System.setProperty("java.protocol.handler.pkgs",
                       "com.sun.net.ssl.internal.www.protocol");
    java.security.Security.addProvider(new com.sun.net.ssl.internal.ssl.
                                       Provider());
     System.setProperty("javax.net.ssl.trustStore", "/myhome/myTrustStore");
   
    System.setProperty("javax.net.ssl.trustStorePassword", trustStorePasswd);
    System.setProperty("javax.net.ssl.keyStoreType", "jks");


I use keytool to add the certificates in the trust store.

Everything works fine so far as I use one instance of the client at the time. It can talk to all the servers whose certificates are in the store. I am trying only two server's to begin with.

 If I run two copies of client, one talking to each of the server's I am supposed to talk to I get following exception :

AxisFault
 faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
 faultSubcode:
 faultString: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Could not find trusted certificate
 faultActor:
 faultNode:
 faultDetail:
        {http://xml.apache.org/axis/}stackTrace: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException:
 Could not find trusted certificate
        at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(DashoA6275)
        at org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:213)
        at org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:157)
        at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:114)
        at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:71)
        at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:150)
        at org.apache.axis.SimpleChain.invoke(SimpleChain.java:120)
        at org.apache.axis.client.AxisClient.invoke(AxisClient.java:180)
        at org.apache.axis.client.Call.invokeEngine(Call.java:2526)
        at org.apache.axis.client.Call.invoke(Call.java:2515)
        at org.apache.axis.client.Call.invoke(Call.java:2210)


What seems to be the problem? Each client runs as a seperate process. Is there some kind of permission or locking problem with truststore file?

Thanks,
ShahS.
Start Free Trial