Websphere 5.1 unknown certificate problem

[Wojciech Kicior]

Hi!
I try to make SSL/TLS connection from my Websphere 5.1 application to Active Directory on the foreign server. I develop in WSAD 5.1 (websphere and wsad are new to me). I got javax.net.ssl.SSLHandshakeException Unknown certificate. I've decided to run the piece of code responsible for connection on standard JDK. I've installed server's certificate in jre keystore, run it and it works fine.
After reading a lot about the problem i've installed the same certificate in the WSAD/runtime/.../DummyServerTrustFile.jks and WSAD/runtime/../java/.../cacerts file but it doesn't work. When I try make SSL connection I usually got Socked is closed exception and sometimes javax.net.ssl.SSLHandshakeException unknown certificate. When I try to make TLS connection I got unknown certificate all the time. Moreover I pasted some code responsible for making only handshake connection (I found on web, some article called 'no more unknown certificate' can't find it now) and it gave me unknown CA exception thrown from com.ibm.jsse (on my jdk I use sun jsse lib where it works fine). Well i played a lot with setting javax.net.ssl.trustStore and other settings, but I can't figure it out.
Can someone help me please? I think its wrong environment(keystores) setting problem or something.

[Subha Murthy]

Hello Wojciech,

Were you able to resolve this issue? I am running into the same exact issue. Any help is highly appreciated.

Thanks a lot!

[Wojciech Kicior]

Hi.
It occured, that the certificates I was using had some unsupported (by java) extensions. I figure it out by running piece of my code on standard J2SE jre and it gave me sensible exception, that those certificate extensions are not supported.
I had to write my own TrustFactoryManager(or something like this, can't remember the name right now) class.