CA certificate does not include basic constraints extension
1 posts in topic
Flat View  Flat View
TOPIC ACTIONS:
 

Posted By:   mohamed_yasin
Posted On:   Thursday, September 18, 2003 12:04 AM

Hi, I have installed JSSE and installed the ssl in tomcat successfully.I have generated the keystore using keytool and got trusted CA from verisign . But if my client access my server, i got the following exception. javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: CA certificate does not include basic constraints extension. What does it means?.How can i solve this problem.Actually i dont want my client to be authenticated in my server?. Help Highly appreciated.    More>>
			
Hi,

I have installed JSSE and installed the ssl in tomcat
successfully.I have generated the keystore using keytool
and got trusted CA from verisign .


But if my client access my server, i got the following
exception.


javax.net.ssl.SSLHandshakeException:
java.security.cert.CertificateException: CA certificate
does not include basic constraints extension.


What does it means?.How can i solve this problem.Actually i
dont want my client to be authenticated in my server?.



Help Highly appreciated.

   <<Less

Re: CA certificate does not include basic constraints extension

Posted By:   pankaj_kumar  
Posted On:   Saturday, September 20, 2003 02:24 PM

The error message seems to indicate that a certificate is signed by a CA certificate which is not supposed to sign certificates (because it doesn't include the basic constraint extension).



Can you explain your setup a bit more?



Pankaj Kumar.


Home  WebLog  J2EE Security
About | Sitemap | Contact