Welcome Guest! You need to login or register to make posts.

Notification

Icon
Error

Options
Go to last post Go to first unread
sunbomb  
#1 Posted : Wednesday, January 03, 2007 10:28:39 PM(UTC)
sunbomb

Rank: Member

Groups: Member
Joined: 9/15/2005(UTC)
Posts: 21

Hi, We are running the ImageUploader in a ColdFusion application (under SSL) and it allows users to upload files. We have both Mac and Windows users. We recently changed/renewed our cert and bought it from a different company. Almost immediately, a number of Mac users with Safari complained that their ImageUploaders weren't working. We tested the uploader using Mac OS X 10.3.9 with Safari (completely updated) and got the same problem. We checked the console for errors and found this:
Code:
Starting upload
IOException occured
java.security.cert.CertificateException: Untrusted Server Certificate 
Chain
-----
javax.net.ssl.SSLHandshakeException: 
java.security.cert.CertificateException: Untrusted Server Certificate 
Chain
	at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA12275)
	at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
	at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
	at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA12275)
	at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA12275)
	at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA12275)
	at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
	at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA12275)
	at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
	at com.sun.net.ssl.internal.ssl.AppOutputStream.write(DashoA12275)
	at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:66)
	at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:124)
	at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(Unknown Source)
	at org.apache.commons.httpclient.HttpMethodBase.writeRequest(Unknown Source)
	at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source)
	at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source)
	at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source)
	at org.apache.commons.httpclient.HttpClient.executeMethod(Unknown Source)
	at org.apache.commons.httpclient.HttpClient.executeMethod(Unknown Source)
	at com.aurigma.imageuploader.upload.d.a(Unknown Source)
	at com.aurigma.imageuploader.upload.d.b(Unknown Source)
	at com.aurigma.imageuploader.upload.d.run(Unknown Source)
	at java.lang.Thread.run(Thread.java:552)
Caused by: java.security.cert.CertificateException: Untrusted Server Certificate Chain
	at com.sun.net.ssl.X509TrustManagerJavaxWrapper.checkServerTrusted(DashoA12275)
	at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(DashoA12275)
	... 20 more
-----
###Error occured###
Status=[ERROR]
Progress=[0]
ValueMax=[0]
Value=[0]
[ErrorPage]
null
[EndOfErrorPage]
We are also lodging a simultaneous ticket with the cert issuing people so as to cover all bases. Thanks.

Edited by user Tuesday, December 18, 2007 7:28:49 PM(UTC)  | Reason: Not specified

sunbomb  
#2 Posted : Thursday, January 04, 2007 4:03:14 AM(UTC)
sunbomb

Rank: Member

Groups: Member
Joined: 9/15/2005(UTC)
Posts: 21

Forgot to add that this was using the Java 1.1 version of ImageUploader. I thought that this could be a problem with using an older version, so I downloaded the newest version of ImageUploader and tested that within the same site, and had the same problem.
Alex Makhov  
#3 Posted : Monday, January 08, 2007 4:05:10 PM(UTC)
Alex Makhov

Rank: Advanced Member

Groups:
Joined: 8/3/2003(UTC)
Posts: 998

Hello, Here is the discussion of the same problem. java.security.cert.CertificateException: Untrusted Server Certificate Chain I think there were some problems while importing your new certificate. Try to import it again in the right sequence.
Sincerely yours, Alex Makhov UserPostedImage Follow Aurigma on Twitter!
sunbomb  
#4 Posted : Monday, January 15, 2007 10:01:54 PM(UTC)
sunbomb

Rank: Member

Groups: Member
Joined: 9/15/2005(UTC)
Posts: 21

Well, after some testing, we figured out it was the cert's problem. This was a GoDaddy cert and the root of the cert (Starfield CA) apparently does not agree well with Java's cache of trusted certs. So we changed the cert on the server to an Equifax/GeoTrust root and everything is fine now. Thanks.
Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.