Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4511556

Certs from some web site are not being parsed

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P4 P4
    • 1.4.1
    • 1.4.0
    • security-libs
    • None
    • hopper
    • generic
    • generic
    • Verified

      Don't know if this is a problem with our parsing, or in their
      certificates, but we should look at it to know for sure.

      Netscape parses this certificate, but we don't.

      This Certificate belongs to:
        www.csrd.ncts-co.siemens.be
        SBS
        SIEMENS
        Bruxelles, Huizingen, BE

                             This Certificate was issued by:
                               GlobalSign Secure Server CA
                               Secure Server CA
                               GlobalSign nv-sa
                               BE


      Serial Number: 01:00:00:00:00:00:E5:7A:FF:CF:DB
      This Certificate is valid from Mon Mar 26, 2001 to Tue
      Mar 26, 2002
      Certificate Fingerprint:
       F4:9D:90:FD:FC:42:81:FE:5B:98:D3:A9:1F:FB:91:8C

      The certificate is here:

      -----BEGIN CERTIFICATE-----
      MIICqjCCAhOgAwIBAgILAQAAAAAA5Xr/z9swDQYJKoZIhvcNAQEFBQAwaTELMAkG
      A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExGTAXBgNVBAsTEFNl
      Y3VyZSBTZXJ2ZXIgQ0ExJDAiBgNVBAMTG0dsb2JhbFNpZ24gU2VjdXJlIFNlcnZl
      ciBDQTAeFw0wMTAzMjYxMjUxMzZaFw0wMjAzMjYxMjUxMzZaMHsxCzAJBgNVBAYT
      AkJFMRIwEAYDVQQIEwlIdWl6aW5nZW4xEjAQBgNVBAcTCUJydXhlbGxlczEQMA4G
      A1UEChMHU0lFTUVOUzEMMAoGA1UECxMDU0JTMSQwIgYDVQQDExt3d3cuY3NyZC5u
      Y3RzLWNvLnNpZW1lbnMuYmUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALPy
      9FseyPm5uTzXaCYQ+r/EnDqtFYl+P40Y688QF5PBa9knIPdixpZ4vnQZldTIfC4h
      mZTQl3GqjxhV4x8mGXrtE8QxaX9C1qSdgvdNliVRxGffm/MJn1dXDKlxl+t/48IU
      tjnP4zUNl02NGq/PlBWlvbY5XzRXH1lpIpc4WjGBAgMBAAGjRjBEMBEGCWCGSAGG
      +EIBAQQEAwIGQDAOBgNVHQ8BAf8EBAMCBPAwHwYDVR0jBBgwFoAUha5LnutlLN38
      /cKz5gMxxoVUMTIwDQYJKoZIhvcNAQEFBQADgYEBqVbbXD5HtVB2jSz+4Nf/PdxE
      fyUemrMykOLMhvFHGnoyCDyR5zMCcnFIXj6VCeu1ouJVv4dxAeQrUOhtU9D9bS/W
      euBmp3v87Of4oghC0N8sszNry5EtdG+0OslvlzwScC3LAf+U9hIfedDJhq7DG5Y3
      gNnAtrF118CJ7o+f6y4=
      -----END CERTIFICATE-----

      This came from a request to the java-security alias.

      =========

      Hi there,

      I have some problems using Java/JSSE with server certificated issued by
      GlobalSign:

      1. If I try to access the site https://www.csrd.ncts-co.siemens.be/ using a
      JSSE based client, I get a 'signed fields overrun' IOException

      2. If I try to import the certificate (attached) of the above site in a
      keystore (using keytool), I get "keytool error: java.lang.Exception: Input
      not an X.509 certificate".

      Any hint of what might be the problem?

      Thanks

      Thierry
      =========

      ###@###.### 2001-10-05

            valeriep Valerie Peng
            wetmore Bradford Wetmore
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: