Path: csiph.com!news.mixmin.net!aioe.org!.POSTED!not-for-mail
From: =?UTF-8?Q?Arne_Vajh=c3=b8j?= <arne@vajhoej.dk>
Newsgroups: comp.lang.java.programmer
Subject: Re: SSL anomalies
Date: Tue, 5 Jul 2016 21:51:52 -0400
Organization: Aioe.org NNTP Server
Lines: 34
Message-ID: <nlho7o$a4s$1@gioia.aioe.org>
References: <pi1nnblbhka12mc73meto1mn7jqqigs31u@4ax.com>
NNTP-Posting-Host: 7SK6yTFfqwlIPNBLl3l7Qg.user.gioia.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Complaints-To: abuse@aioe.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1
X-Notice: Filtered by postfilter v. 0.8.2
Xref: csiph.com comp.lang.java.programmer:34762

On 7/5/2016 6:12 AM, Roedy Green wrote:
> Java leaves something to be desired in SSL/TLS support. Part of the
> problem can be missing root certificates in cacerts. That can be fixed
> by tracking down the root certificates and installing them. However,
> there are a number of URLs that browsers handle without trouble that
> Java for no good reason fails on. Here is a list of some of them. If
> you can get them to work under Java, please let me know.
>
> https://www.ashampoo.com/en/cad/pin/7110/burning-software/burning-studio-free
> https://handbrake.fr
> https://www.htmlvalidator.com/download/registered.php?versionin=110
> https://www.meinbergglobal.com/english/sw/ntp.htm
> https://tortoisesvn.net
>
> Just do a URLConnection. You don't have to read any bytes, just
> connect.

????

All the above works perfect with latest Java 8 except https://handbrake.fr
that throws an exception due to some certificate error.

(it is using a "StartCom Ltd." certificate which I assume
is not that common)

> If you want some software to experiment with Java’s SSL , try the
> Download utility in the FileTransfer package.
> http://mindprod.com/products1.html#FILETRANSFER

Since that code apparently gives errors in more cases
than standard code, then that sounds like a very bad idea.

Arne