When using JSSE to establish a SSL connection with a SSL-enabled
server, if the client only has the CA certificate imported in its
keystore, a javax.net.ssl.SSLHandShakeException is thrown, complaining
that the issuer of the certificate is not the same as the subject DN:

com.sun.patchpro.server.ServerPatchServiceProvider@a6e825 <=javax.net.ssl.SSLHandshakeException: issuer != subject DN
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.b(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(DashoA6275)
        at com.sun.net.ssl.internal.ssl.Handshaker.process_record(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.AppOutputStream.write(DashoA6275)
        at java.io.OutputStream.write(OutputStream.java:61)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(DashoA6275) at sun.net.www.protocol.https.HttpsClient.afterConnect(DashoA6275)
        at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(DashoA6275)
        at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:503)
        at com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnectionOldImpl.getOutputStream(DashoA6275)
        at com.sun.patchpro.server.ServerPatchServiceProvider.isCertificateRevoked(ServerPatchServiceProvider.java:378)

This problem seems to happen on java version "1.4.0-beta3" but not on other
versions of java:

pmdemoclient# /usr/j2se/bin/java -version
java version "1.4.0-beta3"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.0-beta3-b83)
Java HotSpot(TM) Client VM (build 1.4.0-beta3-b83, mixed mode)