Trying to get response body of a https cert pass protected page.

Question

I have a url link i'm trying to get to that requires a username and password. In addition, i have a cert in my browser that has a certificate called cert.pk12. I'm getting this error and have looked everywhere but can't get it to connect. I need someone to help me out. This is the error i'm getting:
errjavax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
I'v looked online and have seen a variety of answers. i'v tried all them with no luck.
1 i tried to trust all sites with some code below which did not work.
=============
// Create a trust manager that does not validate certificate chains
TrustManager[] trustAllCerts = new TrustManager[]{
new X509TrustManager() {
public java.security.cert.X509Certificate[] getAcceptedIssuers() {
return null;
public void checkClientTrusted(
java.security.cert.X509Certificate[] certs, String authType) {
public void checkServerTrusted(
java.security.cert.X509Certificate[] certs, String authType) {
               public boolean isClientTrusted(X509Certificate[] arg0) {
                    // TODO Auto-generated method stub
                    return false;
               public boolean isServerTrusted(X509Certificate[] arg0) {
                    // TODO Auto-generated method stub
                    return false;
// Install the all-trusting trust manager
try {
SSLContext sc = SSLContext.getInstance("SSL");
sc.init(null, trustAllCerts, new java.security.SecureRandom());
HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
} catch (Exception e) {
==============
2. I'v tried adding this cert to my keystore but i'm not able from terminal. I'm on a mac and i'm unfamiliar with the directory structure. I tried adding the cert to the src bin in eclipse where java file was with no luck
any ideas how i can connect to the site?
@SuppressWarnings("deprecation")
public ArrayList<String> getContent()
     ArrayList<String> contents = new ArrayList<String>();
     Pattern pattern = Pattern.compile(regex,Pattern.DOTALL| Pattern.MULTILINE);
     Pattern patternID = Pattern.compile("\"id\"\\s:\\s(\\d*)",Pattern.DOTALL);
System.out.println("auth:" + auth);
// Now you can access an https URL without having the certificate in the truststore
try {
URL url = new URL("https://test.com");
System.out.println("1");
URLConnection uc = url.openConnection();
System.out.println("2");
     uc.setRequestProperty ("Authorization", "Basic " + auth.getPasswordAuthentication());
     HttpURLConnection conn = (HttpURLConnection)url.openConnection();
     System.out.println("3" +      conn.getContent());
     InputStream content = (InputStream)uc.getInputStream();
     System.out.println("4");
     content = (InputStream)uc.getInputStream();
     try {
URL wht = new URL(url);
Security.addProvider(
     new com.sun.net.ssl.internal.ssl.Provider());
     SSLSocketFactory factory =
     (SSLSocketFactory)SSLSocketFactory.getDefault();
     SSLSocket socket =
     (SSLSocket)factory.createSocket(wht.getHost(), 443);
     PrintWriter out = new PrintWriter(
     new OutputStreamWriter(
     socket.getOutputStream()));
     out.println("GET " + url + " HTTP/1.1");
     out.println();
     out.flush();
     BufferedReader in = new BufferedReader(
     new InputStreamReader(
     socket.getInputStream()));
     String line;
     while ((line = in.readLine()) != null) {
     System.out.println(line);
          // Popup Window to request username/password password
          // String userPassword = auth.getPasswordAuthentication();
          // Encode String
          // String encoding = new sun.misc.BASE64Encoder().encode (userPassword.getBytes());
          // or
          // String encoding = Base64Converter.encode (userPassword.getBytes());
/* System.setProperty("javax.net.ssl.trustStore", "steve.p12");
System.setProperty("javax.net.ssl.trustStorePassword", "steve");     
System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");
Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
          // Need to work with URLConnection to set request property
          URLConnection uc = wht.openConnection();
          uc.setRequestProperty ("Authorization", "Basic " + auth.getPasswordAuthentication());
          InputStream content = (InputStream)uc.getInputStream();
          content = (InputStream)uc.getInputStream();
          BufferedReader in = new BufferedReader (new InputStreamReader (content));
          String line;
} catch (MalformedURLException me) {
System.out.println("MalformedURLException: " + me);
} catch (IOException ioe) {
System.out.println("IOException: " + ioe);
return contents;
Edited by: tyweed on Sep 3, 2008 5:13 PM

Answer 1

and this:
public java.security.cert.X509Certificate[] getAcceptedIssuers() {
return null;
may not return null, but if you're using this code you are already desperate. It is not secure and must not be deployed. The correct answer is to import the server's certificate into your truststore.