Skip to main content

Java help 2.0 Not working in HTTPS (IE 7 and Mozila 3 (latest))

9 replies [Last post]
Anonymous

Ours is a web application i.e. our server is running somewhere and we are
connecting to the same through browser (IE or Mozila). Our application works
fine in Http and Https.

But after integrating Java help 2.0, it works fine in http, but for https it
displays the following exception and the application frame does not open. (The
certificate has been accepted by the browser and has been stored by it but
even them this exception is coming)

The exception is:
500 Could not parse Got an IOException
(sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested

In the google, there are some links which claims that have found solution to it
by importing the certificate on the client side. Mostly they are refering to the
the soap application.

But my problem is that ours is not a soap application or a normal application in
which have control; here the browser is connecting to the server. Have tried
it with both IE 7 and Mozilla/5.0.

The server might have the certificate and the browser has imported the
certificate, that's why it is not giving me the certificate error but after
importing the same, the help is not showing up and it is giving me the above
error.

Either I am not getting what they are suggesting or they are refering to some
other problem that is different from mine.

But the problem is that I am not getting anywhere on this? I am new to jsp or
web application but I have extensive exp. in java application dev.

I have already spent many days on it; please help.

The configuration is this:
Server: is Apache Tomcat 5.5.23
Keytool cmd used is (default): keytool -genkey -alias tomcat -keyalg RSA
OS: Windows XP SP 2
Java version is: 1.5.0 (build 1.5.0_19-b02)

Thanks & Regards,
Rajesh

********************************************************************************

You may leave the list at any time by sending message with no subject and
"SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
are available at http://archives.java.sun.com/archives/javahelp-interest.html.
Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.

Reply viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
Rajesh Goel

Hi,

I am still STUCK, please reply :(

Thanks in advance.

- Rajesh

********************************************************************************

You may leave the list at any time by sending message with no subject and
"SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
are available at http://archives.java.sun.com/archives/javahelp-interest.html.
Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.

Roger Brinkley

Don't know what the problem is if it isn't the certificate.

Binky

Rajesh Goel wrote:
> Hi,
>
> I am still STUCK, please reply :(
>
> Thanks in advance.
>
> - Rajesh
>
> ********************************************************************************
>
> You may leave the list at any time by sending message with no subject and
> "SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
> are available at http://archives.java.sun.com/archives/javahelp-interest.html.
> Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.
>

********************************************************************************

You may leave the list at any time by sending message with no subject and
"SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
are available at http://archives.java.sun.com/archives/javahelp-interest.html.
Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.

mawi
Offline
Joined: 2003-06-11
Points: 0

"PKIX path building failed" means that the server's certificate couldn't be verified properly. Most likely it is because you are using a self-signed certificate on the server. In order for Java to authenticate it, it must be imported into your Java keystore using "keytool -importcert ..." so that Java knows about it.

It doesn't matter if it's a SOAP application, all SSL/TLS traffic (that I know of) requires either certificates on the client side (if it's a self-signed certificate) or a proper certificate signed by one of the root CAs.

jindagi
Offline
Joined: 2004-03-23
Points: 0

But in case when the user is accessing the https website (using the self-signed certificate), then the browser should itself insert the certificate (after all those warning messages and after acceptance of the certificate by the user).

Here the user does not know anything about inserting the certificate into the keystore.

Also, Even the demo available for the server side help, which is given with the java help 2.05 is not working, when the tomcat is configured for HTTPS and has SELF-SIGNED Certificate.

For running the sun demo for server side help I am using sun Java Help 2.05 with following java version:

Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_19-b02)
Java HotSpot(TM) Client VM (build 1.5.0_19-b02, mixed mode, sharing)

and tomcat version: 5.5

It seems, I have done some wrong configuration, otherwise, it cannot be possible that the java help system demo itself is not working in HTTPS.

Please reply soon. I am stuck with this problem :(

Rajesh Goel

As per my knowledge, we are using the latest version of help available, jh2.05,
at the sun site: https://javahelp.dev.java.net/#binary

After observing that the help in our application is not working, we tried to run
the demo application for server help provided by sun. To our surprise, the
demo also does not work in https.

It was quite disheartening to observe that the demo does not work in https.

It might be the case that we are missed out something in our configuration.
That is why, the help is not coming up.

Also, please provide me the link of the latest help, in case I am not using the
latest version of help.

Thanks & Regards,
Rajesh Goel

********************************************************************************

You may leave the list at any time by sending message with no subject and
"SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
are available at http://archives.java.sun.com/archives/javahelp-interest.html.
Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.

Rajesh Goel

Typo correction: This issue is coming with both servers, i.e. tomcat as well as
Jetty.

Also the browsers which I used are 2 most common ones: IE 7 and Mozilla.

The problem is occuring on both.

********************************************************************************

You may leave the list at any time by sending message with no subject and
"SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
are available at http://archives.java.sun.com/archives/javahelp-interest.html.
Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.

Rajesh Goel

Thanks for the quick reply :)

Basically, which downloads are you suggesting to update: JDK? Tomcat? Or
java help?

For JDK, we have to stick to it as we are very near to the release. We are
using 1.5

For Tomcat, we are actually using jetty for our production thing but tomcat
for testing. This issue is coming with.

For Java Help: I have used java help 2.05 which, as per my knowledge, is the
latest available on the java site https://javahelp.dev.java.net/

Thanks & Regards,

Rajesh Goel

********************************************************************************

You may leave the list at any time by sending message with no subject and
"SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
are available at http://archives.java.sun.com/archives/javahelp-interest.html.
Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.

Roger Brinkley

JavaHelp. I think.

Binky

Rajesh Goel wrote:
> Thanks for the quick reply :)
>
> Basically, which downloads are you suggesting to update: JDK? Tomcat? Or
> java help?
>
> For JDK, we have to stick to it as we are very near to the release. We are
> using 1.5
>
> For Tomcat, we are actually using jetty for our production thing but tomcat
> for testing. This issue is coming with.
>
> For Java Help: I have used java help 2.05 which, as per my knowledge, is the
> latest available on the java site https://javahelp.dev.java.net/
>
> Thanks & Regards,
>
> Rajesh Goel
>
> ********************************************************************************
>
> You may leave the list at any time by sending message with no subject and
> "SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
> are available at http://archives.java.sun.com/archives/javahelp-interest.html.
> Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.
>

********************************************************************************

You may leave the list at any time by sending message with no subject and
"SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
are available at http://archives.java.sun.com/archives/javahelp-interest.html.
Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.

Roger Brinkley

I think that means you have to upgrade to the latest download.

Binky

Rajesh Goel wrote:
> Ours is a web application i.e. our server is running somewhere and we are
> connecting to the same through browser (IE or Mozila). Our application works
> fine in Http and Https.
>
> But after integrating Java help 2.0, it works fine in http, but for https it
> displays the following exception and the application frame does not open. (The
> certificate has been accepted by the browser and has been stored by it but
> even them this exception is coming)
>
> The exception is:
> 500 Could not parse Got an IOException
> (sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested
>
> In the google, there are some links which claims that have found solution to it
> by importing the certificate on the client side. Mostly they are refering to the
> the soap application.
>
> But my problem is that ours is not a soap application or a normal application in
> which have control; here the browser is connecting to the server. Have tried
> it with both IE 7 and Mozilla/5.0.
>
> The server might have the certificate and the browser has imported the
> certificate, that's why it is not giving me the certificate error but after
> importing the same, the help is not showing up and it is giving me the above
> error.
>
> Either I am not getting what they are suggesting or they are refering to some
> other problem that is different from mine.
>
> But the problem is that I am not getting anywhere on this? I am new to jsp or
> web application but I have extensive exp. in java application dev.
>
> I have already spent many days on it; please help.
>
> The configuration is this:
> Server: is Apache Tomcat 5.5.23
> Keytool cmd used is (default): keytool -genkey -alias tomcat -keyalg RSA
> OS: Windows XP SP 2
> Java version is: 1.5.0 (build 1.5.0_19-b02)
>
> Thanks & Regards,
> Rajesh
>
> ********************************************************************************
>
> You may leave the list at any time by sending message with no subject and
> "SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
> are available at http://archives.java.sun.com/archives/javahelp-interest.html.
> Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.
>

********************************************************************************

You may leave the list at any time by sending message with no subject and
"SIGNOFF JAVAHELP-INTEREST" in the body to LISTSERV@JAVA.SUN.COM. Archives
are available at http://archives.java.sun.com/archives/javahelp-interest.html.
Submit bug reports at http://java.sun.com/cgi-bin/bugreport.cgi.