Sun.security.validator.ValidatorException: Netscape cert type does not perm

Question

Hi,
I am getting the following exception when clientAuthentication is enabled for ssl connection.
I am using tomcat and a java client in my application.
Please let me know how do i get through this.
Thanks in advance
-Sanjeev
Below trace is from catalina.out
===========================
http-8443-Processor24, SEND TLSv1 ALERT: fatal, description = certificate_unknown
http-8443-Processor24, WRITE: TLSv1 Alert, length = 2
http-8443-Processor24, called closeSocket()
http-8443-Processor24, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: Netscape cert type does not permit use for SSL client
http-8443-Processor24, called close()
http-8443-Processor24, called closeInternal(true)
===================================
I get the below exception in my java client application.
==========================================
: 68 42 6F FD E9 35 AB E5 C7 48 31 2C 78 31 BA F0 hBo..5...H1,x1..
0020: EB 97 10 1F F9 B2 03 B7 7D CE 8A 04 73 37 07 A1 ............s7..
0030: 9D 46 5A A2 B7 99 EE 86 1D EE A1 E4 D6 64 73 9B .FZ..........ds.
0040: 6B FA D1 19 44 54 C0 47 DC F8 E1 4B 33 F6 0D 2D k...DT.G...K3..-
0050: C9 04 B7 E8 8F 67 00 99 78 67 CC BE 26 C4 73 B5 .....g..xg..&.s.
0060: 88 26 F6 08 B7 A3 89 A0 28 29 79 DD 16 B0 86 8F .&......()y.....
0070: DE AA EA D3 1F 9F 8B 5B E7 B4 51 3B C8 90 67 0D .......[..Q;..g.
0080: 68 46 F1 CC 10 D9 hF....
main, WRITE: TLSv1 Handshake, length = 134
main, WRITE: TLSv1 Change Cipher Spec, length = 1
main, handling exception: java.net.SocketException: Software caused connection abort: socket write error
main, SEND TLSv1 ALERT: fatal, description = unexpected_message
main, WRITE: TLSv1 Alert, length = 2
Exception sending alert: java.net.SocketException: Software caused connection abort: socket write error
main, called closeSocket()
Exception
=================================================

Answer 1

Netscape cert type does not permit use for SSL clientTry using another certificate. Your certificate can't be used as a web browser client certificate.