Hi,
We have a webservice installed on a server over https protocol, and the following certification chain:
Internal Root CA Certificate
|
+-----> Certificate X
|
+----> Cerificate Y
Certificate Y has Common Name (CN) equals to the hostname where this webservice is deployed.
On the client side, since the root CA certificate is internal, we had to install a custom trust keystore, and use the -Djavax.net.ssl.trustStore=/path/to/trust.keystore system property. Inside that trust keystore we imported the Internal Root CA certificate.
When the client invoke the webservice, it still gives SSL handhsake exception, saying couldn't find certification path. However when we imported Certificate Y into the trust keystore, it works. Is there any way to make the handshake work just by trusting the root CA?
The client runs in a JBoss container, and we tried -Dorg.jboss.security.ignoreHttpsHost=true but didn't help