SSL Connection failing

Question

I can create a new user using the following code
public void createUser()
      System.setProperty("javax.net.ssl.trustStore","C:\\j2sdk1.4.2_02\\jre\\lib\\security\\cacerts");
          System.setProperty("javax.net.ssl.keyStorePassword","xxxx");
          env = new Hashtable();
          env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
      env.put(Context.PROVIDER_URL, "ldap://xxx.xxx.xxx.xxx:636/dc=sxxxx, dc=xxxx, dc=ac, dc=uk");
          env.put(Context.SECURITY_AUTHENTICATION, "simple");
          env.put(Context.SECURITY_PRINCIPAL, "[email protected]");
          env.put(Context.SECURITY_CREDENTIALS, "xxxx");
      env.put(Context.REFERRAL, "throw");
      env.put(Context.SECURITY_PROTOCOL, "ssl");
          try
               ctx = new InitialDirContext(env);
         BasicAttribute oc = new BasicAttribute("objectClass");
               oc.add("top");
               oc.add("person");
               oc.add("organizationalPerson");
               oc.add("user");
               BasicAttribute cn = new BasicAttribute("cn", "TestUser2");
               BasicAttribute gn = new BasicAttribute("givenName", "Test2");
               BasicAttribute sn = new BasicAttribute("sn", "User");
               BasicAttribute dn = new BasicAttribute("displayName", "Test User2");
               BasicAttribute uac = new BasicAttribute("userAccountControl", "512");
               BasicAttribute sam = new BasicAttribute("sAMAccountName", "TestUser2");
               BasicAttribute upn = new BasicAttribute("userPrincipalName", "[email protected]");
         BasicAttribute des = new BasicAttribute("description", "Systems Team");
         BasicAttribute ras = new BasicAttribute("msNPAllowDialin", "TRUE");
             String newVal = new String("\"swansea\"");
               byte _bytes[] = newVal.getBytes("Unicode");
               byte bytes[] = new byte[_bytes.length-2];
               System.arraycopy(_bytes, 2, bytes, 0, _bytes.length-2);
               BasicAttribute pwd = new BasicAttribute("unicodePwd");
               pwd.add((byte[])bytes);
               BasicAttributes attrs = new BasicAttributes();
               attrs.put(oc);
             attrs.put(gn);
           attrs.put(sn);
             attrs.put(cn);
               attrs.put(dn);
               attrs.put(uac);
             attrs.put(sam);
             attrs.put(upn);
         attrs.put(des);
               attrs.put(pwd);
         attrs.put(ras);
               ctx.createSubcontext("cn=TestUser2, ou=Systems", attrs);
               System.out.println("User has been created");
                 ctx.close();
          catch(NameAlreadyBoundException ex)
               System.err.println("Username is already in use.");
          catch(Exception ex)
               System.err.println("Failed to create user account.");
               ex.printStackTrace();
   }but when I try to modify the user i've created using the code below, i get a error saying couldn't find trusted certificate, but surely it used it to create the user in the first place.
public void change(String user)
          System.setProperty("javax.net.ssl.trustStore","C:\\j2sdk1.4.0_02\\jre\\lib\\security\\cacerts");
          System.setProperty("javax.net.ssl.keyStorePassword","xxxx");
          env = new Hashtable();
          DirContext ctx = null;
      env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
          env.put(Context.PROVIDER_URL, "ldap://xxx.xxx.xxx.xxx:636/dc=xxxxx, dc=xxxx, dc=ac, dc=uk");
          env.put(Context.SECURITY_AUTHENTICATION, "simple");
          env.put(Context.SECURITY_PRINCIPAL, "[email protected]");
          env.put(Context.SECURITY_CREDENTIALS, "xxxx");
          env.put(Context.REFERRAL, "ignore");
          env.put(Context.SECURITY_PROTOCOL, "ssl");
          try
               ctx = new InitialDirContext(env);
               BasicAttribute attribute = new BasicAttribute("msNPAllowDialin");
               attribute.add("FALSE");
               Attributes bAttrs = new BasicAttributes();
         bAttrs.put(attribute);
               ctx.modifyAttributes(user, ctx.REPLACE_ATTRIBUTE, bAttrs);
               System.out.println("success");
               ctx.close();
          catch (Exception ex)
               ex.printStackTrace();
   }any suggestions gratefully recieved
Thanks
Dean

Answer 1

Did you ever figure this error out? I'm seeing not exactly this error, but similar. I had an SSL connection to Active Directory set up and working with a temporary certificate. Then the Active Directory administrator got the permanent certificate. I imported the certificate of the Active Directory server and rootCA and restarted my server and added code to set trustStore:
System.setProperty("javax.net.ssl.trustStore","C:\\j2re1.4.2_03\\bin\\cacerts");
System.setProperty("javax.net.ssl.keyStorePassword","changeit");
Hashtable env = new Hashtable(11);
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://ourserver.edu:636");
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.putContext.SECURITY_PRINCIPAL, "cn=Admin,ou=something....dc=edu");
env.put(Context.SECURITY_CREDENTIALS, "the_password");
env.put(Context.SECURITY_PROTOCOL,"ssl");
DirContext ctx = new InitialDirContext(env);
but still I get
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found
     at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown Source)
etc.
Any ideas would be GREATLY appreciated. Thanks in advance.