0 Replies Latest reply on Dec 9, 2002 4:30 AM by Marcel Offermans

    Problem using Verisign test certificate

    Marcel Offermans Newbie

      I'm trying to set up a test certificate from Verisign to use in JBoss. The whole process of creating a certificate request and importing the response works just fine, but when I start Jboss, I get error messages that I don't understand.

      What I'm doing:

      First I create a keystore, and generate a certificate request which I copy-paste into the right area in the Verisign site. As first and last name I use ?localhost?:

      keytool -genkey -alias test -keyalg RSA -keystore mystore
      keytool -certreq -alias test -sigalg MD5withRSA -keystore mystore

      Then after a short while, I receive the test certificate in the mail. I store the data in a file called ?verisign.cer? and I import this into the store:

      keytool -import -alias verisign -trustcacerts -file verisign.cer -keystore mystore

      This works, I can now verify that there are two certificates in the store:

      keytool -list -keystore mystore

      I configure JBoss to use the store I created and I fill in the password. When I start JBoss everything seems to work, but the certificate that is used is a self-signed certificate.

      Therefore, I concluded that apparently JBoss is using the wrong certificate (since there are two in the store) so I proceed and delete the first one:

      keytool -delete -alias test -keystore mystore

      Then I start JBoss again, but when I do that, it gets stuck in an infinite loop and produces the following error messages:

      javax.net.ssl.SSLException: No available certificate corresponds to the SSL cipher suites which are enabled.
      at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.a(DashoA6275)
      at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.accept(DashoA6275)
      at org.mortbay.util.ThreadedServer.acceptSocket(ThreadedServer.java:349)
      at org.mortbay.util.ThreadedServer$Acceptor.run(ThreadedServer.java:518)

      Needless to say it does not work. I don't have a clue what I'm doing wrong however, so any help is more than welcome!