Home/ Questions/Q 293307
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-12T06:15:35+00:00

Problem: I’m getting a thrown error from javax.net.ssl.SSLHandshakeException (see attached picture) Is it possible

  • 0

Problem:

I’m getting a thrown error from javax.net.ssl.SSLHandshakeException (see attached picture)

alt text

Is it possible for Java to have a corrupt or missing CA cert? If so how can I repair or resolve this issue/error?

Things I’ve Tried:

  1. I have removed all versions of JRE from the PC and installed the latest version of JRE (1.6.14).
  2. Cleaned and removed all unnecessary Trusted Cert’s from the User section of Certificates.
  3. Try running keytool to get the fingerprints of the CA’s

When trying to run the keytool I’m getting the following:

keytool error: java.security.cert.CertificateParsingException: java.io.IOException: subject key, java.security.spec.InvalidKeySpecException: Unknown key spec.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It is theoretically possible, but IMO highly unlikely, that Java has a corrupt CA cert. It is more likely that the CA cert you want is not in the JRE’s cacerts store. You can check on the contents of the store (on Linux at least) using ‘keytool’; e.g.

    keytool -list -keystore /usr/java/jdk1.6.0_14/jre/lib/security/cacerts

    Scan through that listing to see if you can see the fingerprint for the CAcert that your URL requires.

    Reference: the JDK 6.0 JDK Development Tools / Security Tools page/section.

    • 0