Rank: Member
Groups: Member
Joined: 9/15/2005(UTC)
Posts: 21
|
Hi, We are running the ImageUploader in a ColdFusion application (under SSL) and it allows users to upload files. We have both Mac and Windows users. We recently changed/renewed our cert and bought it from a different company. Almost immediately, a number of Mac users with Safari complained that their ImageUploaders weren't working. We tested the uploader using Mac OS X 10.3.9 with Safari (completely updated) and got the same problem. We checked the console for errors and found this: Code:Starting upload
IOException occured
java.security.cert.CertificateException: Untrusted Server Certificate
Chain
-----
javax.net.ssl.SSLHandshakeException:
java.security.cert.CertificateException: Untrusted Server Certificate
Chain
at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(DashoA12275)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:66)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:124)
at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(Unknown Source)
at org.apache.commons.httpclient.HttpMethodBase.writeRequest(Unknown Source)
at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source)
at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source)
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source)
at org.apache.commons.httpclient.HttpClient.executeMethod(Unknown Source)
at org.apache.commons.httpclient.HttpClient.executeMethod(Unknown Source)
at com.aurigma.imageuploader.upload.d.a(Unknown Source)
at com.aurigma.imageuploader.upload.d.b(Unknown Source)
at com.aurigma.imageuploader.upload.d.run(Unknown Source)
at java.lang.Thread.run(Thread.java:552)
Caused by: java.security.cert.CertificateException: Untrusted Server Certificate Chain
at com.sun.net.ssl.X509TrustManagerJavaxWrapper.checkServerTrusted(DashoA12275)
at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(DashoA12275)
... 20 more
-----
###Error occured###
Status=[ERROR]
Progress=[0]
ValueMax=[0]
Value=[0]
[ErrorPage]
null
[EndOfErrorPage]
We are also lodging a simultaneous ticket with the cert issuing people so as to cover all bases. Thanks. Edited by user Tuesday, December 18, 2007 7:28:49 PM(UTC)
| Reason: Not specified
|
|
|
|
|
|
Rank: Member
Groups: Member
Joined: 9/15/2005(UTC)
Posts: 21
|
Forgot to add that this was using the Java 1.1 version of ImageUploader. I thought that this could be a problem with using an older version, so I downloaded the newest version of ImageUploader and tested that within the same site, and had the same problem.
|
|
|
|
|
|
Rank: Advanced Member
Groups:
Joined: 8/3/2003(UTC)
Posts: 998
|
|
|
|
|
|
|
|
|
Rank: Member
Groups: Member
Joined: 9/15/2005(UTC)
Posts: 21
|
Well, after some testing, we figured out it was the cert's problem. This was a GoDaddy cert and the root of the cert (Starfield CA) apparently does not agree well with Java's cache of trusted certs. So we changed the cert on the server to an Equifax/GeoTrust root and everything is fine now.
Thanks.
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.