Groups > comp.lang.java.programmer > #34762

Re: SSL anomalies

Path	csiph.com!news.mixmin.net!aioe.org!.POSTED!not-for-mail
From	Arne Vajhøj <arne@vajhoej.dk>
Newsgroups	comp.lang.java.programmer
Subject	Re: SSL anomalies
Date	Tue, 5 Jul 2016 21:51:52 -0400
Organization	Aioe.org NNTP Server
Lines	34
Message-ID	<nlho7o$a4s$1@gioia.aioe.org> (permalink)
References	<pi1nnblbhka12mc73meto1mn7jqqigs31u@4ax.com>
NNTP-Posting-Host	7SK6yTFfqwlIPNBLl3l7Qg.user.gioia.aioe.org
Mime-Version	1.0
Content-Type	text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding	8bit
X-Complaints-To	abuse@aioe.org
User-Agent	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1
X-Notice	Filtered by postfilter v. 0.8.2
Xref	csiph.com comp.lang.java.programmer:34762

Show key headers only | View raw

On 7/5/2016 6:12 AM, Roedy Green wrote:
> Java leaves something to be desired in SSL/TLS support. Part of the
> problem can be missing root certificates in cacerts. That can be fixed
> by tracking down the root certificates and installing them. However,
> there are a number of URLs that browsers handle without trouble that
> Java for no good reason fails on. Here is a list of some of them. If
> you can get them to work under Java, please let me know.
>
> https://www.ashampoo.com/en/cad/pin/7110/burning-software/burning-studio-free
> https://handbrake.fr
> https://www.htmlvalidator.com/download/registered.php?versionin=110
> https://www.meinbergglobal.com/english/sw/ntp.htm
> https://tortoisesvn.net
>
> Just do a URLConnection. You don't have to read any bytes, just
> connect.

????

All the above works perfect with latest Java 8 except https://handbrake.fr
that throws an exception due to some certificate error.

(it is using a "StartCom Ltd." certificate which I assume
is not that common)

> If you want some software to experiment with Java’s SSL , try the
> Download utility in the FileTransfer package.
> http://mindprod.com/products1.html#FILETRANSFER

Since that code apparently gives errors in more cases
than standard code, then that sounds like a very bad idea.

Arne

Thread

SSL anomalies Roedy Green <inquiry@mindprod.com> - 2016-07-05 03:12 -0700
  Re: SSL anomalies Arne Vajhøj <arne@vajhoej.dk> - 2016-07-05 21:51 -0400
    Re: SSL anomalies Roedy Green <inquiry@mindprod.com> - 2016-07-05 20:36 -0700
      Re: SSL anomalies Roedy Green <inquiry@mindprod.com> - 2016-07-06 01:14 -0700
      Re: SSL anomalies Arne Vajhøj <arne@vajhoej.dk> - 2016-07-06 22:42 -0400
    Re: SSL anomalies Roedy Green <inquiry@mindprod.com> - 2016-07-12 08:02 -0700
      Re: SSL anomalies Arne Vajhøj <arne@vajhoej.dk> - 2016-07-12 22:11 -0400

csiph-web