[josm-dev] SunCertPathBuilderException

[Vincent Privat]

I just have updated the server certificate with a new one from Globalsign.
Cheers,
Vincent

2015-12-15 23:43 GMT+01:00 Vincent Privat <vincent.privat at gmail.com>:

> Last time we had the problem with StartSSL (because of osm.org switching
> their certificate) I tried to reach them and got no reply at all, they seem
> to just not care about Java and I don't believe there is something to
> expect from them in the future.
>
> At least Let's Encrypt guys were very reactive as they answered my
> questions in a matter of minutes. We'll see if they manage to reach the
> Oracle truststore in the next weeks/months.
>
> 2015-12-15 23:30 GMT+01:00 Dirk Stöcker <openstreetmap at dstoecker.de>:
>
>> On Tue, 15 Dec 2015, Stephan Knauss wrote:
>>
>> Dirk Stöcker writes:
>>>
>>> Cert chain is/was complete. It seems Java still does not include
>>>> StartSSL, but Unix versions and browsers use the system certstore. So
>>>> standalone non-Unixes fail. All others work.
>>>>
>>>
>>> probably you wanted to say WOsign here, but yes, neither that, nor
>>> Startcom nor IdenTrust (for Let's Encrypt) is included in the Java store.
>>>
>>
>> No. Really StartSSL. Wosign main cert is signed by StartSSL and I always
>> supply the whole chain from Intermediate, Wosign main to StartSSL (although
>> e.g. Firefox has all of these 3 already included).
>>
>> Just to have it as a reference in the mailing list archives: In the
>>> support forum Let's Entrypt said they had applied to be included in Oracles
>>> cacert list. So hopefully for the next renewal we'll have a better
>>> alternative.
>>>
>>
>> As far as I know StartSSL also tried and had no success till now and
>> probably gave up.
>>
>> This is the command to dump the contents of the certificate store to see
>>> whether a specific CA is included.
>>>
>>
>> Well I use Linux and here it worked.
>>
>> The last time I used Windows was when I wanted to update my Windows 8 to
>> 10. Took 2 days and the result is a broken OS (at least it booted once) and
>> I will now expand my Linux partition and drop Windows completely. Still
>> have an older Vista in a VM for seldom use. :-)
>>
>> Ciao
>> --
>> http://www.dstoecker.eu/ (PGP key available)
>> _______________________________________________
>> josm-dev mailing list
>> josm-dev at openstreetmap.org
>> https://lists.openstreetmap.org/listinfo/josm-dev
>>
>
>