Re: [Hbci4java-help] java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors

[Olaf W. <hbc...@wi...>]

Hi,

wofuer eigentlich dieses zwanghaft englische Geschreibe?
Niemand ausserhalb von Deutschland verwendet HBCI.

> Strange, I can´t find any blame at all.
> A simple "no" to my question if you knew
> a way or code to do this was all that was required.
> So I´ll just look for myself next time I have some
> spare cycles to use on this program.

Schreib einen eigenen TrustManager.

SSLContext ctx = SSLContext.getInstance(...);
KeyManagerFactory km = KeyManagerFactory.getInstance(...);
km.init(keystore,"...".toCharArray());

TrustManager tm = new MyTrustManager();
ctx.init(km.getKeyManagers(),new TrustManager[]{tm},null); 

> >> You are proposing to sit here for weeks to find all hbci-servers
> >> of all banks on this planet and then to constantly monitor them.
> >
> > I do not. But you seem to think I have to time to do this, just to
> > make *you* happy. You are wrong.
> 
> Why? Did I propose you to do this job or just show
> how rediculus a solution your proposal was?

Aus deinem Posting war ueberhaupt ersichtlich, was genau deine Software
macht, wer sie wie nutzt, wer wo was konfiguriert oder administriert.
Woher soll Stefan dann die fuer dein Szenario passende Loesung wissen?

> I don´t think any user has more then a dozen or so bank-accounts
> at any one time. I´ll sign it up to be added in the next version.
> It certainly beats keytool.

Nochmal. Ich kann deinen Postings nicht entnehmen, wer deine
User sind. Woher soll dann jemand wissen, ob die mehr als
ein Konto haben koennen?
 
> > But this is not a *HBCI4Java related* problem, so I can only give
> > you the advice to learn how to deal with SSL certificates in Java,
> > and do not blame others for the fact that you don't know.
> 
> Did I say it is?

Warum hast du die Frage dann in der HBCI4Java-Mailingliste
gestellt und nicht z.Bsp. in de.comp.lang.java?

Gruss
Olaf