Caught a IOException. unsupported keyword

[Arador]

Hello,

I have an order processing system that is using JDK_1.2.2_17 to create a ssl tunnel so that we can send secure xml back to our customers. When it tries to make a secure connection we receive "Caught a IOException. unsupported keyword OID.2.5.4.17". I know that this is a certificate issue caused by my version of JAVA not being able to recognize a 9 digit zip code.

This is what the log is showing:
[ignore]
ResponseHandler.constructXMLString(). Constructed XML String <?xml version="1.0" encoding="UTF-8"?>
ResponseHandler.constructXMLString(). Exiting.
ResponseHandler.post(). Entering with url

https://www.fakeurl.com

xmlString <?xml version="1.0" encoding="UTF-8"?>
DataPoster.post(). Entering.
DataPoster.post(). The Encoded Return URL protocol = https
DataPoster.post(). Saving Posted file
DataPoster.connect(). Entering.
DataPoster.connectToURL().
DataPoster.connectToURL(). Trying Connecting to

https://www.fakeurl.com

DataPoster.connectToURL(). Connected to URL -->

https://www.fakeurl.com

DataPoster.connectToURL(). Exiting. The Time taken = ( 0ms )
DataPoster.connect(). Exiting. The Time taken = ( 1ms )
DataPoster.post(). The Posting URL = com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnection:

https://www.fakeurl.com

DataPoster.post(). The Encoded RetURL UserID Passwd = null [/ignore]
DataPoster.post(). Caught a IOException. unsupported keyword OID.2.5.4.17
DataPoster.post(). Exiting. ( 598ms )
ResponseHandler.post(). Caught DataPostException.
ResponseHandler.run(). Post to client URL failed.


My question is this, is there any work around to this other then upgrading my JAVA?

Upgrading the JAVA is not a possible solution at this time due to a Production Freeze for the entire Production Network in progress and the amount of other applications needed to be reconfigured if we upgrade.

David Bell

 

[Arador]

My apoligies, that should read "to send an encrypted XML via SSL" not "to create a ssl tunnel so that we can send secure xml"

I apoligize for the confusion.

David Bell

 

[sedj]

http://archives.java.sun.com/cgi-bin/wa?A2=ind0005&L=java-security&F=&S=&P=2056

http://forum.java.sun.com/thread.jspa?forumID=2&messageID=1970858&threadID=321077

These two links make for some interesting reading. It appears as if an old version of JSSE (which the HttpsUrlConenction class will use) has/had a bug in it. Now considering that your JRE version is so old, I expect that is your problem.

In short, the answer appears to be :

1) Upgrade your JRE & JSSE extension
2) Request that the certificate vendor does not include the OID.2.5.4.17 code.



--------------------------------------------------
Free Database Connection Pooling Software

http://www.primrose.org.uk