Re: [Hbci4java-help] java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors

[Marcus W. <Ma...@Wo...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HBCI4Java (Stefan Palme) schrieb:
> But why do you blame ME for not being able to do this? To quote
> you:
>
>> Do you realize that I have a) no Idea what banks my users want to
>> use


Strange, I can´t find any blame at all.
A simple "no" to my question if you knew
a way or code to do this was all that was required.
So I´ll just look for myself next time I have some
spare cycles to use on this program.

>> You are proposing to sit here for weeks to find all hbci-servers
>> of all banks on this planet and then to constantly monitor them.
>
> I do not. But you seem to think I have to time to do this, just to
> make *you* happy. You are wrong.

Why? Did I propose you to do this job or just show
how rediculus a solution your proposal was?

> So why not ask out there, how other authors solve this problem?

Because I first asked you before I ask and search around elsewhere.

>
>> Wouldn´t it be far easier to just connect to the server at the
>> time the user configures my program, fetch the certificate and
>> let the user decide if he wants to trust it? THAT is what I asked
>> if you knew how to do that or knew (Java-)code that did that so I
>> could integrate this feature. At runtime my program runs without
>> user-interaction so I have to ask at configure-time.
>
> This may be a solution, if your programm will be run only against a
> handful of banks, and your users must reconfigure / recompile your
> application when the certificate changes. But yes, why not, this
> may be a solution for your problem.

I don´t think any user has more then a dozen or so bank-accounts
at any one time. I´ll sign it up to be added in the next version.
It certainly beats keytool.

> But this is not a *HBCI4Java related* problem, so I can only give
> you the advice to learn how to deal with SSL certificates in Java,
> and do not blame others for the fact that you don't know.

Did I say it is?

Marcus
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAktLb5gACgkQf1hPnk3Z0cT+DQCg2EMxYBMpvwrA+Mbz9PoB0N5a
iEgAnRKeuIC4LY46ADCxhBRQer0klrXG
=YChD
-----END PGP SIGNATURE-----