Wednesday, October 19, 2005

Java and HTTPS (Globalsign)

It seems that Java 1.4 doesn't have to Globalsign root certificate installed which means it fails to connect to some Websites using HTTPS. You can grab the certificate from: http://secure.globalsign.net/cacert/root.cacert and then install it with a command like:
keytool -keystore /usr/local/j2sdk1.4.2_07/jre/lib/security/cacerts
-import -file root.cacert -alias globalsign
The standard password is "changeit" and after saying you trust it you should be able to connect to sites through HTTPS that are signed with a globalsign root certificate.