Results 1 to 4 of 4
  1. #1
    Join Date
    Jul 2009
    Posts
    3
    Rep Power
    0

    Default Getting the Error : SSLException :End user tried to act as a CA in WAS

    I have a web service application running in WAS 5.1 and client application running in WAS 6.1.
    We use server side authentication and we have configured the trust store keystore on the client side.

    But when we try to invoke the wenservice i get the error "SSLException :End user tried to act as a CA".

    Kindly let me know the possibility of this error.

    Thanks In advance
    Shyam.

  2. #2
    Steve11235's Avatar
    Steve11235 is offline Senior Member
    Join Date
    Dec 2008
    Posts
    1,046
    Rep Power
    8

    Default

    This is just a guess, but it sounds like the client is running on the same server as the "Certificate Authority". The CA is supposed to be an independent third party. A simple attack would be to run a dummy CA service on the client machine to "authenticate" the client.

    The obvious solution is to move the CA server to another instance of WAS, but that may not be practicable. The WAS 5.1 server might be convinced to overlook the situation...

  3. #3
    Join Date
    Jul 2009
    Posts
    3
    Rep Power
    0

    Default

    Hi Steve,thanks for your reply.The client is running on different WAS server and Web service is running on different server.I believe the CA server is in different machine from client.

    Do you have any other idea to debug the issue.

  4. #4
    Steve11235's Avatar
    Steve11235 is offline Senior Member
    Join Date
    Dec 2008
    Posts
    1,046
    Rep Power
    8

    Default

    We use server side authentication and we have configured the trust store keystore on the client side.
    This is what I was getting at...

Similar Threads

  1. User settings
    By 3speed in forum New To Java
    Replies: 8
    Last Post: 10-31-2008, 12:53 PM
  2. How to get the User Name
    By Java Tip in forum java.lang
    Replies: 0
    Last Post: 04-04-2008, 03:43 PM
  3. cant take input from user
    By new_1 in forum New To Java
    Replies: 6
    Last Post: 12-25-2007, 08:38 AM
  4. New User
    By TKI5 in forum New To Java
    Replies: 0
    Last Post: 12-13-2007, 02:13 AM
  5. How to get the User Name
    By JavaBean in forum Java Tip
    Replies: 0
    Last Post: 10-04-2007, 10:35 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •