Failed to validate certificate

Hi

Using http://:8080/servoy-client/Hades.jnlp leds to an error. I did update the client machine to Mac OS X 10.6.2. I use the standard SSL certificate given by Servoy. Any idea what’s wrong here. I did not change anything on the server.

Best regards, Robert

PS: See attachments for failure

Hi Robert,

I’ve read on a java dev mailing list that there was something broken with the cacerts keystore with the latest Java for Mac OS X 10.6 Update 1 on Snow Leopard.
Does your client have that update? Maybe you coudl try clearing the cache there, I don’t know if you can rollback the update, but there seems to be a problem with this update and certificates.

Hi Patrick

No, I didn’t apply the Java 6 Update 1 to Java (until now). So this can’t be the problem. I hope Servoy or others can shed some light on this as our productive app doesn’t work anymore and I have no clue what to do :-(

Do others have a Mac OS X server running 10.5.8 with clients running 10.6.2? Does it work?

Any hints very much appreciated as this is a problem I don’t know how to debug???

Thanks and regards, Robert

ptalbot:
Hi Robert,

I’ve read on a java dev mailing list that there was something broken with the cacerts keystore with the latest Java for Mac OS X 10.6 Update 1 on Snow Leopard.
Does your client have that update? Maybe you coudl try clearing the cache there, I don’t know if you can rollback the update, but there seems to be a problem with this update and certificates.

what version of servoy is that?
What does it say in that cert dialog about the Validity?
doesnt it say anywhere why it cant evaluate?

Hi Johann

jcompagner:
what version of servoy is that?

On Server:
Server Information
Servoy version 4.1.4 -build 681
Repository version 35 (d6f8b8f1-66dd-4da7-a314-c936245874c2)
Current time: Mon Dec 07 16:30:52 CET 2009
Uptime: 19 hours 31 minutes 17 seconds

User Information
Logged in as: admin

JDK Information
java.vm.name=Java HotSpot™ Server VM
java.version=1.5.0_20-b02-315
java.vm.info=mixed mode
java.vm.vendor=Apple Inc.

Operating System Information
os.name=Mac OS X
os.version=10.5.8
os.arch=i386

On Client:
Mac OS X 10.6.2
JavaVM [Java SE 6, 1.6.0_15/i386 (com.apple.javajdk16, /System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Home)]

jcompagner:
What does it say in that cert dialog about the Validity?

I attached all 3 windows I got with the Failed Certificate Message to my opening message (see top message of this thread). The bottom 2 screenshots are the details I get when pressing the “Details” button on the “Failed to validate certificate” window.
Or are you looking for something else?

jcompagner:
doesnt it say anywhere why it cant evaluate?

I can’t find a place, there is nothing related in the Console nor in the servoy_log.txt.

Regards, Robert

problem with screen shots is that i cant see everything…

in the 3th screenshot i see “Validity” and the [From Wed Nov …]
But i cant see the value…

But if it is the latest 4.1 then that cant be a problem then it is really a problem on the mac that it doesnt have a full Certificate chain or something
Because our certificate of 4.1 isnt expired or isnt invalid and should work fine.

Hmmm, this is the only thing I found, but I have no clue if it’s related to Servoy certificate.

07.12.09 16:56:05 /System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer[129] Warning: accessing obsolete X509Anchors.

jcompagner:
problem with screen shots is that i cant see everything…

in the 3th screenshot i see “Validity” and the [From Wed Nov …]
But i cant see the value…

But if it is the latest 4.1 then that cant be a problem then it is really a problem on the mac that it doesnt have a full Certificate chain or something
Because our certificate of 4.1 isnt expired or isnt invalid and should work fine.

Hi Johann

Here is the better screenshot. You see the Certificate is valid till Tue Feb 15 00:59:59 CET 2011. So this should not be the problem, shouldn’t it? But then, what else to look for?

Regards, Robert

jcompagner:
problem with screen shots is that i cant see everything…

in the 3th screenshot i see “Validity” and the [From Wed Nov …]
But i cant see the value…

But if it is the latest 4.1 then that cant be a problem then it is really a problem on the mac that it doesnt have a full Certificate chain or something
Because our certificate of 4.1 isnt expired or isnt invalid and should work fine.

Hi Robert,

I had the same problem after upgrading to snow leopard… after spending some time clicking around I just deleted the certificates from the keyring, cleaned the cache and started applications again. Probably the update simply corrupted the certificate/keyring… now everything works fine.

Hello Enrico

Nice to hear from you!

I did what you did but it did not help. But I found the solution for my (bad Sevoy, i. e. Java Web Start) behaviour: I deleted all files in the Java Preference Utility and all caches there (don’t know if that was really necessary) BUT what really solved the problem is when I got in the Keychain app and selected the Servoy B.V. certificate and with Cmd-I (Info) said under the triangle > Trust > When using this certificate: Always Trust (it’s a popup selection).

Now the error disappeared and I can successfully download an app via Java Web Start again - huchhh…

Now if only someone could explain why this can happen and when it happens?

Best regards, Robert

PS: Thanks everyone for help!

automazione:
Hi Robert,

I had the same problem after upgrading to snow leopard… after spending some time clicking around I just deleted the certificates from the keyring, cleaned the cache and started applications again. Probably the update simply corrupted the certificate/keyring… now everything works fine.