suresh.attanay
...@gmail.com> wrote:
> Hi,
> I installed the certificate in the keystore I used in my application.
> Thanks,
> -Suresh
> On Wed, Apr 17, 2013 at 1:25 PM, Acojako Chces <acojakoch...@gmail.com>wrote:
>> How did you installed Google certificate and where? I'm confused, is it
>> necessary to install certificates for openid4java?
>> On Thursday, April 26, 2012 4:57:21 PM UTC+2, SureshAtt wrote:
>>> Hi all,
>>> I have an OpenID client webapp which works fine with an OpenID
>>> Provider server over SSL, but my app throws the $subject exception
>>> when I try to use Google OpenID. I have successfully installed the
>>> public key certificate of Google but still I get this error. I did
>>> some Google search and I found this issue has been there in many cases
>>> but I could not find a proper solution. Please help me with this,
>>> My environment :
>>> OpenID4Java 0.9.6
>>> Oracle Java 1.6.0_26 (64-bit)
>>> Ubuntu 11.10
>>> Apr 26, 2012 7:54:43 PM org.openid4java.server.**RealmVerifier
>>> setEnforceRpId
>>> WARNING: RP discovery / realm validation disabled;
>>> Apr 26, 2012 7:54:43 PM org.openid4java.discovery.**Discovery discover
>>> INFO: Starting discovery on URL identifier: https://profiles.google.com/
>>> **suresh.attanayake <https://profiles.google.com/suresh.attanayake>
>>> org.openid4java.discovery.**yadis.YadisException: 0x704: I/O transport
>>> error: peer not authenticated
>>> at
>>> org.openid4java.discovery.**yadis.YadisResolver.**retrieveXrdsLocation(*
>>> *YadisResolver.java:
>>> 478)
>>> at
>>> org.openid4java.discovery.**yadis.YadisResolver.discover(**YadisResolver.ja va:
>>> 248)
>>> at
>>> org.openid4java.discovery.**yadis.YadisResolver.discover(**YadisResolver.ja va:
>>> 232)
>>> at
>>> org.openid4java.discovery.**yadis.YadisResolver.discover(**YadisResolver.ja va:
>>> 166)
>>> at org.openid4java.discovery.**Discovery.discover(Discovery.**java:147)
>>> at org.openid4java.discovery.**Discovery.discover(Discovery.**java:129)
>>> at
>>> org.openid4java.consumer.**ConsumerManager.discover(**ConsumerManager.java:
>>> 542)
>>> at
>>> org.wso2.carbon.identity.**openid.openidclient.**
>>> OpenIDRelyingPartyServlet.**doPost(**OpenIDRelyingPartyServlet.**java:
>>> 148)
>>> at javax.servlet.http.**HttpServlet.service(**HttpServlet.java:637)
>>> at javax.servlet.http.**HttpServlet.service(**HttpServlet.java:717)
>>> at
>>> org.apache.catalina.core.**ApplicationFilterChain.**internalDoFilter(**Appl icationFilterChain.java:
>>> 290)
>>> at
>>> org.apache.catalina.core.**ApplicationFilterChain.**doFilter(**ApplicationF ilterChain.java:
>>> 206)
>>> at
>>> org.apache.catalina.core.**StandardWrapperValve.invoke(**StandardWrapperVal ve.java:
>>> 233)
>>> at
>>> org.apache.catalina.core.**StandardContextValve.invoke(**StandardContextVal ve.java:
>>> 191)
>>> at
>>> org.apache.catalina.core.**StandardHostValve.invoke(**StandardHostValve.jav a:
>>> 127)
>>> at
>>> org.apache.catalina.valves.**ErrorReportValve.invoke(**ErrorReportValve.jav a:
>>> 102)
>>> at
>>> org.apache.catalina.core.**StandardEngineValve.invoke(**StandardEngineValve .java:
>>> 109)
>>> at
>>> org.apache.catalina.connector.**CoyoteAdapter.service(**CoyoteAdapter.java:
>>> 293)
>>> at
>>> org.apache.coyote.http11.**Http11Processor.process(**Http11Processor.java:
>>> 859)
>>> at org.apache.coyote.http11.**Http11Protocol
>>> $Http11ConnectionHandler.**process(Http11Protocol.java:**602)
>>> at org.apache.tomcat.util.net.**JIoEndpoint$Worker.run(**JIoEndpoint.java:
>>> 489)
>>> at java.lang.Thread.run(Thread.**java:662)
>>> Caused by: javax.net.ssl.**SSLPeerUnverifiedException: peer not
>>> authenticated
>>> at
>>> com.sun.net.ssl.internal.ssl.**SSLSessionImpl.**getPeerCertificates(**SSLSe ssionImpl.java:
>>> 352)
>>> at
>>> org.apache.http.conn.ssl.**AbstractVerifier.verify(**AbstractVerifier.java:
>>> 128)
>>> at
>>> org.apache.http.conn.ssl.**SSLSocketFactory.**connectSocket(**SSLSocketFact ory.java:
>>> 339)
>>> at
>>> org.apache.http.impl.conn.**DefaultClientConnectionOperato**
>>> r.openConnection(**DefaultClientConnectionOperato**r.java:
>>> 123)
>>> at
>>> org.apache.http.impl.conn.**AbstractPoolEntry.open(**AbstractPoolEntry.java :
>>> 147)
>>> at
>>> org.apache.http.impl.conn.**AbstractPooledConnAdapter.**open(**
>>> AbstractPooledConnAdapter.**java:
>>> 101)
>>> at
>>> org.apache.http.impl.client.**DefaultRequestDirector.**execute(**DefaultReq uestDirector.java:
>>> 381)
>>> at
>>> org.apache.http.impl.client.**AbstractHttpClient.execute(**AbstractHttpClie nt.java:
>>> 641)
>>> at
>>> org.apache.http.impl.client.**AbstractHttpClient.execute(**AbstractHttpClie nt.java:
>>> 576)
>>> at
>>> org.apache.http.impl.client.**AbstractHttpClient.execute(**AbstractHttpClie nt.java:
>>> 554)
>>> at org.openid4java.util.**HttpCache.head(HttpCache.java:**335)
>>> at
>>> org.openid4java.discovery.**yadis.YadisResolver.**retrieveXrdsLocation(*
>>> *YadisResolver.java:
>>> 400)
>>> ... 21 more
>>> Thanks & Regards,
>>> -Suresh
>> --
>> You received this message because you are subscribed to the Google Groups
>> "OpenID4Java" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to openid4java+unsubscribe@googlegroups.com.
>> To post to this group, send email to openid4java@googlegroups.com.
>> Visit this group at http://groups.google.com/group/openid4java?hl=en.
>> For more options, visit https://groups.google.com/groups/opt_out.
> --
> Suresh Attanayake
> Blog : http://sureshatt.blogspot.com/
> Web : http://www.ssoarcade.com/
> LinkedIn : http://www.linkedin.com/pub/suresh-attanayake/16/165/181
> Twitter : http://twitter.com/sureshatt
> Facebook : https://www.facebook.com/IdentityWorld
> --
> You received this message because you are subscribed to the Google Groups
> "OpenID4Java" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to openid4java+unsubscribe@googlegroups.com.
> To post to this group, send email to openid4java@googlegroups.com.
> Visit this group at http://groups.google.com/group/openid4java?hl=en.
> For more options, visit https://groups.google.com/groups/opt_out.