Skip to main content
BlueMix free trial
 
developerWorks
AIX and UNIX
Information Mgmt
Lotus
New to Lotus
Products
How to buy
Downloads
Live demos
Technical library
Training
Support
Forums & community
Events
Rational
Tivoli
WebSphere
Java™ technology
Linux
Open source
SOA and Web services
Web development
XML
My developerWorks
About dW
Submit content
Feedback



developerWorks  >  Lotus  >  Forums & community  >  IBM Lotus Notes/Domino 8.5 Forum (includes Lotus Notes Traveler)

IBM Lotus Notes/Domino 8.5 Forum (includes Lotus Notes Traveler)

Sign in to participate Previous Next
Subject: certificate chaining error
Feedback Type: Problem
Product Area: Domino Server
Technical Area: Application Development
Platform: Windows
Release: 8.5.2
Reproducible: Always

Hi,
we have this web service consuming client running on domino as java agent.

The code is written in java using axis2. it is connecting to the webservice server running on apache via SSL.
We are using this client to connect to 3 endpoint servers, which are running the same webservices.
Everything was working fine until one of the server's certificate has expired and we generated a new one. All 3 ceritificates are issued by the same official CA.
Now when trying to connect to this particular server we get the error 'certificate chaining error' - see the log. Mind you - we still have 2 other servers where this connection is working fine using the same client code.
We have tried various options with the domino's truststore, also re-created the server certificate, tested with different domino server versions (8.5, 8.5.2), tested with different client certificates - nothing has helped.
For the other 2 servers that are working fine we are using standard truststore with the certificates imported. After this error occured we tried to import the whole certificate chain into the truststore. Also tried a separate truststore with only this certificate and the chain, but nothing...

We also tested this connection with pure java client and this is working fine, which led us to conclusion that there's probably a problem
with domino. Would you have any ideas how to solve this? If u need additional info pls let me know. Thank you!


client running on: Domino 8.5.2, jvm 1.6.0
web service server: Apache

log:
28.03.2011 12:55:04 HTTP JVM: SIGN: 1 document found
28.03.2011 12:55:04 HTTP JVM: url:
https://www.moabox.at/signservice/services/SignService
28.03.2011 12:55:04 HTTP JVM: Zustelldokumešnt_leer_sig.pdf
28.03.2011 12:55:04 HTTP JVM: error signing the document
28.03.2011 12:55:04 HTTP JVM: AxisFault
28.03.2011 12:55:04 HTTP JVM: faultCode:
{http://schemas.xmlsoap.org/soap/envelope/}Server.userException
28.03.2011 12:55:04 HTTP JVM: faultSubcode:
28.03.2011 12:55:04 HTTP JVM: faultString:
javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.g: Certificate
chaining error
28.03.2011 12:55:04 HTTP JVM: faultActor:
28.03.2011 12:55:04 HTTP JVM: faultNode:
28.03.2011 12:55:04 HTTP JVM: faultDetail:
28.03.2011 12:55:04 HTTP JVM:
{http://xml.apache.org/axis/}stackTrace:javax.net.ssl.SSLHandshakeException:

com.ibm.jsse2.util.g: Certificate chaining error
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.n.a(n.java:36)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.sc.a(sc.java:442)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gb.a(gb.java:18)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gb.a(gb.java:205)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.hb.a(hb.java:46)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.hb.a(hb.java:57)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gb.n(gb.java:285)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gb.a(gb.java:146)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.sc.a(sc.java:88)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.sc.g(sc.java:437)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.sc.a(sc.java:544)
28.03.2011 12:55:04 HTTP JVM: at
com.ibm.jsse2.sc.startHandshake(sc.java:124)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.ja
va:186)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:191)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:404)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:
32)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invokeEngine(Call.java:2784)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invoke(Call.java:2767)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invoke(Call.java:2443)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invoke(Call.java:2366)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invoke(Call.java:1812)
28.03.2011 12:55:04 HTTP JVM: at
at.hpc._2008._02.SendStation.SignService.SignServiceSoapBindingStub.signRequ
est(SignServiceSoapBindingStub.java:203)
28.03.2011 12:55:04 HTTP JVM: at
AttachmentTwins.signAttachment(Unknown Source)
28.03.2011 12:55:04 HTTP JVM: at JavaAgent.NotesMain(Unknown Source)
28.03.2011 12:55:04 HTTP JVM: at
lotus.domino.AgentBase.runNotes(Unknown Source)
28.03.2011 12:55:04 HTTP JVM: at
lotus.domino.NotesThread.run(Unknown Source)
28.03.2011 12:55:04 HTTP JVM: Caused by: com.ibm.jsse2.util.g:
Certificate chaining error
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.util.f.b(f.java:149)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.util.d.a(d.java:12)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gc.a(gc.java:28)
28.03.2011 12:55:04 HTTP JVM: at
com.ibm.jsse2.gc.checkServerTrusted(gc.java:16)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gc.b(gc.java:82)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.hb.a(hb.java:308)
28.03.2011 12:55:04 HTTP JVM: ... 25 more
28.03.2011 12:55:04 HTTP JVM:
{http://xml.apache.org/axis/}hostname:helios
28.03.2011 12:55:04 HTTP JVM: javax.net.ssl.SSLHandshakeException:
com.ibm.jsse2.util.g: Certificate chaining error
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.AxisFault.makeFault(AxisFault.java:101)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:154)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:
32)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invokeEngine(Call.java:2784)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invoke(Call.java:2767)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invoke(Call.java:2443)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invoke(Call.java:2366)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.client.Call.invoke(Call.java:1812)
28.03.2011 12:55:04 HTTP JVM: at
at.hpc._2008._02.SendStation.SignService.SignServiceSoapBindingStub.signRequ
est(SignServiceSoapBindingStub.java:203)
28.03.2011 12:55:04 HTTP JVM: at
AttachmentTwins.signAttachment(Unknown Source)
28.03.2011 12:55:04 HTTP JVM: at JavaAgent.NotesMain(Unknown Source)
28.03.2011 12:55:04 HTTP JVM: at
lotus.domino.AgentBase.runNotes(Unknown Source)
28.03.2011 12:55:04 HTTP JVM: at
lotus.domino.NotesThread.run(Unknown Source)
28.03.2011 12:55:04 HTTP JVM: Caused by:
28.03.2011 12:55:04 HTTP JVM: javax.net.ssl.SSLHandshakeException:
com.ibm.jsse2.util.g: Certificate chaining error
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.n.a(n.java:36)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.sc.a(sc.java:442)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gb.a(gb.java:18)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gb.a(gb.java:205)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.hb.a(hb.java:46)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.hb.a(hb.java:57)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gb.n(gb.java:285)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gb.a(gb.java:146)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.sc.a(sc.java:88)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.sc.g(sc.java:437)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.sc.a(sc.java:544)
28.03.2011 12:55:04 HTTP JVM: at
com.ibm.jsse2.sc.startHandshake(sc.java:124)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.ja
va:186)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:191)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:404)
28.03.2011 12:55:04 HTTP JVM: at
org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)
28.03.2011 12:55:04 HTTP JVM: ... 14 more
28.03.2011 12:55:04 HTTP JVM: Caused by:
28.03.2011 12:55:04 HTTP JVM: com.ibm.jsse2.util.g: Certificate
chaining error
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.util.f.b(f.java:149)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.util.d.a(d.java:12)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gc.a(gc.java:28)
28.03.2011 12:55:04 HTTP JVM: at
com.ibm.jsse2.gc.checkServerTrusted(gc.java:16)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.gc.b(gc.java:82)
28.03.2011 12:55:04 HTTP JVM: at com.ibm.jsse2.hb.a(hb.java:308)
28.03.2011 12:55:04 HTTP JVM: ... 25 more


Feedback number WEBB8FMFV2 created by Ruzena Klembasova on 04/05/2011

Status: Open
Comments:

certificate chaining error (Ruzena Klembaso... 5.Apr.11)
. . any luck? (Dmytro Pastoven... 23.Jun.11)
. . . . we have fixed our problem. (Dmytro Pastoven... 8.Jul.11)
. . resolved (Ruzena Klembaso... 5.Jan.12)




Printer-friendly

Search this forum


Sign In or Register

 Sign In or Register
Sign in
Forgot your password?
Forgot your user name?
Create new registration

Member Tools


RSS Feeds

 RSS feedsRSS
All forum posts RSS
All main topics RSS
More Lotus RSS feeds

Resources

 Resources
Forum use and etiquette
Native Notes Access
Web site Feedback

Lotus Support


 Lotus Support
IBM Support Portal - Lotus software
Lotus Support documents
Lotus support by product
Lotus support downloads
Lotus support RSS feeds

Wikis

 Wikis
IBM Composite Applications
IBM Mashup Center
IBM Connections
IBM Connections Cloud Developers
IBM Docs
IBM Forms
IBM Mobile Connect
IBM Sametime
IBM SmartCloud for Social Business
IBM Web Experience Factory
Lotus Domino
Lotus Domino Designer
Lotus Expeditor
Lotus Foundations
Lotus iNotes
Lotus Instructor Community Courseware
Lotus Notes
Lotus Notes & Domino Application Development
Lotus Notes Traveler
Lotus Protector
Lotus Quickr
Lotus Symphony
IBM Web Content Manager
WebSphere Portal

Lotus Forums


 Lotus Forums
Notes/Domino 9.0
Notes/Domino 8.5 + Traveler
Notes/Domino XPages development forum
Notes/Domino 8
Notes/Domino 6 and 7
IBM Connections
IBM Mobile Connect
IBM Sametime
IBM SmartCloud Notes
Lotus Enterprise Integration
Lotus Protector
Lotus Quickr
Lotus SmartSuite