当我尝试从本地环境调用需要对HTTPS
进行基本身份验证的SOAP Web服务(.wsdl)时,我收到了SSLHandShakeException。
首先,我从Chrome浏览器下载了证书Cert.cer
,然后按照以下步骤操作。
1) keytool -genkey -dname "CN=localhost:8080, OU=Group Name, O=Company Name,L=City Name, S=State, C=IN" -alias "key_alias" -keyalg RSA -keypass changeit -keystore server.keystore
2) copy server.keystore C:\Work\jboss-5.1.0.GA\server\default\conf
3) keytool -export -alias "key_alias" -file Cert.cer -keystore C:\Work\jboss-5.1.0.GA\server\default\conf\server.keystore
4) copy Cert.cer C:\Work\jboss-5.1.0.GA\server\default\conf
5) keytool -printcert -v -file C:\Work\jboss-5.1.0.GA\server\default\conf\Cert.cer
6) keytool -import -alias "key_alias" -file Cert.cer -keystore "C:\Program Files (x86)\Java\jdk1.6.0_03\jre\lib\security\cacerts"
<!-- SSL/TLS Connector configuration using the admin devl guide keystore-->
<Connector name="https" protocol="HTTP/1.1" SSLEnabled="true"
port="8443" address="${jboss.bind.address}" keyAlias="key_alias"
scheme="https" secure="true" clientAuth="false"
keystoreFile="C:\Work\jboss-5.1.0.GA\server\default\conf\server.keystore"
keystorePass="changeit" sslProtocol = "TLS" />
按照这些步骤操作后,我仍然面临与javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2013-12-04 12:31:14,841 ERROR [STDERR] (http-127.0.0.1-8443-6) AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
faultSubcode:
faultString: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
faultActor:
faultNode:
faultDetail:
{http://xml.apache.org/axis/}stackTrace:javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
那有什么不对?任何人都可以帮我找到吗??