[Htmlunit-user] htmlunit and entrus pki certificate

[Muri J. (K. 11) <jos...@cr...>]

Hi everyone,
 
I tried to run my htmlunit tests over an https url. The application needs a login via an Entrust Pki certificate.
I configured my java environment for jsse (sdk 1.4.2) as described on the homepage but when i run the tests i get
an Exception. See console:


chain [1] = [
[
  Version: V3
  Subject: OU=TEST Certification Authority Corporate ID, OU=xxx, O=xxx
  Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

  Key:  SunRsaSign RSA public key:
  public exponent:
    03
  modulus:
    d43d57eb f1825c8c 0940b72c fbb86793 3947cafd 7265121f 56af2de2 0ef48c59
    1bac951e ada3d5c2 d709a4be ff0bc319 626b2c66 e80d590d fd830320 be58b2bf
    5f42d7b1 adc9da05 de9a3cd3 65f874da 74019003 21b81e5b 09963b32 e93899b3
    e215df0b 24025679 87e3c806 83349e3a fd2707dd aba6fd24 5a8c8d36 f0b86997
  Validity: [From: Thu Feb 25 19:59:39 CET 1999,
               To: Mon Feb 25 20:29:39 CET 2019]
  Issuer: OU=TEST Certification Authority Corporate ID, OU=xxx, O=xxx
  SerialNumber: [    36d5a4a1]

Certificate Extensions: 8
[1]: ObjectId: 1.2.840.113533.7.65.0 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 0C 30 0A 1B 04 56 34   2E 30 03 02 04 90        ..0...V4.0....


[2]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
...
]
]

[3]: ObjectId: 2.16.840.1.113730.1.1 Criticality=false
NetscapeCertType [
   SSL CA
   S/MIME CA
   Object Signing CA]

[4]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
...
]

]

[5]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [CN=CRL1, OU=TEST Certification Authority Corporate ID, OU=xxx, O=xxx]
]]

[6]: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
  Key_CertSign
  Crl_Sign
]

[7]: ObjectId: 2.5.29.16 Criticality=false
PrivateKeyUsage: [
From: Thu Feb 25 19:59:39 CET 1999, To: Mon Feb 25 19:59:39 CET 2019]

[8]: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:true
PathLen:2147483647
]

]
  Algorithm: [SHA1withRSA]
  Signature:
...

***
main, SEND SSLv3 ALERT:  fatal, description = certificate_unknown
main, WRITE: SSLv3 Alert, length = 2
main, called closeSocket()
main, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found
main, called close()
main, called closeInternal(true)

I can see the name of the certificate in the log but it seems not to work..
Any idea?
 
Thanks for the input.
 -Josef