Re: java.rmi.ConnectIOException: error during JRMP connection establishment;

Check that the public key of the client was correctly exported to the
keystore of the server ... Good Luck !!!

-----Mensaje original-----
De: Martin Petrella [mailto:martinpetrella@xxxxxxxxx]
Enviado el: Wednesday, August 18, 2004 11:35 AM
Para: RMI-USERS@xxxxxxxxxxxx; César Fernando Henriques
Asunto: Re: java.rmi.ConnectIOException: error during JRMP connection
establishment;


I'm having the same problem in that when I enable client authentication with
SSLSocket.setNeedClientAuth(true) on the server, an exeption,
javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate,
is thrown.  Turning debug on shows that the client certificate is null.  I'm
sure there is something extra that the client needs to do on its side when
client authentication is enabled but I'm not sure what that is.

I'm working with the HelloWorld example from the JSSE guide.  The client
code looks like this.  This code works fine when client authentication is
disabled.

import java.io.*;
import java.net.*;
import java.rmi.server.*;
import javax.net.ssl.*;

public class RMISSLClientSocketFactory
        implements RMIClientSocketFactory, Serializable {

    public Socket createSocket(String host, int port)
        throws IOException
        {
            SSLSocketFactory factory =
                (SSLSocketFactory)SSLSocketFactory.getDefault();
            SSLSocket socket = (SSLSocket)factory.createSocket(host, port);
            socket.startHandshake();
            return socket;
        }
}
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.738 / Virus Database: 492 - Release Date: 8/16/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.738 / Virus Database: 492 - Release Date: 8/16/2004

===========================================================================
To unsubscribe, send email to listserv@xxxxxxxxxxxx and include in the body
of the message "signoff RMI-USERS".  For general help, send email to
listserv@xxxxxxxxxxxx and include in the body of the message "help".

For a list of frequently asked RMI questions please refer to:
http://java.sun.com/j2se/1.3/docs/guide/rmi/faq.html

To view past RMI-USERS postings, please see:
http://archives.java.sun.com/archives/rmi-users.html