Servoy Forum

Good afternoon,

I am using the standard http plugin to connect to a secured http (https) location.

When doing so from a smartclient started from developer i get a dialog asking me if i want to trust the certificate after which it gets added to the servoy.ks file.

When running the same routine from a 'real' client, this dialog is not showing and the connection is cancelled.

Any ideas on what causes this behaviour?

Regards,

Gerard van der Stelt

Anything in the log when that happens?
Is the real client you are talking about a webclient or smart client?

Hi Andrei,

I am talking about a smart client, not a webclient.

I am not finding any errors in the log which i can relate to this problem.

That is strange. Looking at plugin's code I would say that, if you are using Smart Client, it should work or you should get a dialog or you should at least get an error message/exception.
Please enable Java console window (on windows you can find that in Control panel - Java - Advanced - Show console). Then when you start the client again you should see the java console window. See if you get any messages in there when you try again. (I am hoping we get more info about the reason why it fails... file system permissions problem / certificates / ...)

If you don't see anything in there either you could create a case with a sample solution for further investigation.

Good morning Andrei,

My appologies for my late response. I was having some problems in testing this particular case.

The Java console shows the following:
aug 21, 2015 8:58:16 AM com.servoy.j2db.util.Debug error
SEVERE: Throwable
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Unknown Source)
at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
at sun.security.ssl.Handshak

The Servoy log however does not show anything relevant.

Regards,

Gerard van der Stelt

Is it the same URL you are accessing when you do get the dialog in developer?

If yes, it might happen because the client is running on an older Java version which doesn't have stuff up-to-date. Try to run it using a newer Java. (you can for example manually run it by downloading the JNLP file instead of running it and using 'javaws' executable from your java install/bin dir - or just change the Java version on your system)

If not, then the URL that is the problem - can you access it nicely in the browser? Does it show any problems in the security info of the page (usually a lock symbol in browsers) or does it say it's a valid encrypted connection?

Looks like a client on an older java version, and the server your connecting to doesn't have the supported ciphers for that client. I suggest entering the domain of the service your connecting to here: https://www.ssllabs.com/ssltest/index.html and you'll see what clients and java versions are supported.