HTTPS Certificate change

Question

I have a customer that has changed their web server certificate for https. However the JRE version they are using 1.4.1_03 doesn't seem to recognize this new certificate. If I am able to get the public key for this certificate can I add this using the keytool? If not what are the options? Will they have to get a certificate from a well know CA like versign or thawte??

Answer 1

you can ignore the certificate by writing an all trusting trust manager:
    public static void trustHttpsCertificates() throws Exception {
        Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
        //Create a trust manager that does not validate certificate chains:
        TrustManager[] trustAllCerts = new TrustManager[] {
            new X509TrustManager() {
                public X509Certificate[] getAcceptedIssuers() {
                    return null;
                public void checkServerTrusted(X509Certificate[] certs, String authType) throws CertificateException {
                    return;
                public void checkClientTrusted(X509Certificate[] certs, String authType) throws CertificateException {
                    return;
            }//X509TrustManager
        };//TrustManager[]
        //Install the all-trusting trust manager:
        SSLContext sc = SSLContext.getInstance("SSL");
      sc.init(null, trustAllCerts, new SecureRandom());
       HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
    }//trustHttpsCertificates()