Search This Blog

Tuesday, May 31, 2011

WebSphere "IBM End user tried to act as a CA"

When i tried to access a secured web services i get the next error:

org.apache.axis2.AxisFault: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: End user tried to act as a CA
at org.apache.axis2.AxisFault.makeFault(AxisFault.java:430)
at org.apache.axis2.transport.http.SOAPMessageFormatter.writeTo(SOAPMessageFormatter.java:83)
at org.apache.axis2.transport.http.AxisRequestEntity.writeRequest(AxisRequestEntity.java:84)
at org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:499)


the CA in this case is Entrust company.
after some hours , i found the next article that helped me to solved it out , and this way i understood i am not alone here.
the fix is described here:
IBM End user tried to act as a CA - United States.
summery:
update the java.security file , set the
ssl.TrustManagerFactory.algorithm to use IbmPKIX insteaf of IbmX509 .

this article gave me the clue that its somthing with entrust CA as well

and restart your server.
enjoy
Yaniv Tzanany


1 comment:

joshua paul said...

link:

IBM End user tried to act as a CA - United States

has changed:

http://www-01.ibm.com/support/docview.wss?uid=swg21456835