CN mismatch between SSL certificates
My two-way SSL setup authenticates the server but fails to authenticate the client.
The certificates that I have in my identity store have CN's that are different from the one shown below. I am assuming that the debug info. generated by -Djavax.net.debug=ssl below actually shows the request certificate's CN.
*** CertificateRequest
Cert Types: RSA, DSS,
Cert Authorities:
<CN=test, OU=test1, O=test2, L=test3, ST=test4, C=UK>
The exception is
main, WRITE: TLSv1 Handshake, length = 48
main, READ: TLSv1 Alert, length = 2
main, RECV TLSv1 ALERT: fatal, bad_certificate
main, called closeSocket()
main, handling exception: javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate
javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate
javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate
I was given two .cer files. One of them is the root of the other. I just imported both into the identity store. Is this procedure correct ?
Thanks,
Mohan