javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alerts.getSSLException(Unknown Source) at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source) at sun.security.ssl.Handshaker.fatalSE(Unknown Source) at sun.security.ssl.Handshaker.fatalSE(Unknown Source) at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source) at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source) at sun.security.ssl.Handshaker.processLoop(Unknown Source) at sun.security.ssl.Handshaker.process_record(Unknown Source) at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source) at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) at InstallCert.main(InstallCert.java:116) Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.validator.PKIXValidator.doBuild(Unknown Source) at sun.security.validator.PKIXValidator.engineValidate(Unknown Source) at sun.security.validator.Validator.validate(Unknown Source) at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source) at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source) at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source) at InstallCert$SavingTrustManager.checkServerTrusted(InstallCert.java:196) at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(Unknown Source) ... 9 more Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source) at java.security.cert.CertPathBuilder.build(Unknown Source) ... 17 more
Server sent 3 certificate(s):
1 Subject CN=www.forest.go.kr, OU=Group of Server, O=Government of Korea, C=KR Issuer CN=CA131100001, OU=GPKI, O=Government of Korea, C=KR sha1 42 3c 85 bd 5e 45 31 4c a9 a3 10 96 cf 68 9b 02 db 38 61 f6 md5 a0 39 c0 3b 20 b4 b9 9f 76 4e b2 9f 47 c6 86 c6
2 Subject CN=GPKIRootCA1, OU=GPKI, O=Government of Korea, C=KR Issuer CN=GPKIRootCA1, OU=GPKI, O=Government of Korea, C=KR sha1 76 12 ed 9e 49 b3 65 b4 da d3 12 0c 01 e6 03 74 8d ae 8c f0 md5 fa 39 6a 2b b3 84 a0 5f 3f a2 37 60 9d 68 d5 16
3 Subject CN=CA131100001, OU=GPKI, O=Government of Korea, C=KR Issuer CN=GPKIRootCA1, OU=GPKI, O=Government of Korea, C=KR sha1 9d 98 28 e1 4b cd b0 a7 2b 2e 53 ea e1 1f e5 f1 55 b7 6a 5a md5 6f 10 ac 48 30 c7 20 b9 1b 80 4b 54 17 a5 da ff
Enter certificate to add to trusted keystore or 'q' to quit: [1] 1
[ [ Version: V3 Subject: CN=www.forest.go.kr, OU=Group of Server, O=Government of Korea, C=KR Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11
Key: Sun RSA public key, 2048 bits modulus: 29715665473460609655189714531179157600749188284774236463035145051469962797709290851052242411064230059022689403104238429958681233426267113077217935027561950116032229512476679513024297854025015385009548024666629103386522294150650384453022061164382809116053217462353649706798147395180349168469167558165146090297366739533707159696677870937180343886414953244143117532885159629458029997248364021031912583835826786760364917673944652110138727452111735193701641253191297094181267504257344474650423451353094239438343409774013673720913314973999358511658868569034827399151766564432665702291176325335673416487619134210887875012733 public exponent: 65537 Validity: [From: Thu Jun 23 11:12:08 GMT+09:00 2016, To: Sun Sep 23 23:59:59 GMT+09:00 2018] Issuer: CN=CA131100001, OU=GPKI, O=Government of Korea, C=KR SerialNumber: [ 046b1844 acdbfbbb 61027da3 f790fa8d b96faf31]
Unparseable certificate extensions: 1 [1]: ObjectId: 2.5.29.31 Criticality=false Unparseable CRLDistributionPoints extension due to java.io.IOException: invalid URI name:ldap://cen.dir.go.kr:389/cn=crl3p1dp2,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary
0000: 30 81 BF 30 7E A0 7C A0 7A 86 78 6C 64 61 70 3A 0..0....z.xldap: 0010: 2F 2F 63 65 6E 2E 64 69 72 2E 67 6F 2E 6B 72 3A //cen.dir.go.kr: 0020: 33 38 39 2F 63 6E 3D 63 72 6C 33 70 31 64 70 32 389/cn=crl3p1dp2 0030: 2C 63 6E 3D 43 41 31 33 31 31 30 30 30 30 31 2C ,cn=CA131100001, 0040: 6F 75 3D 47 50 4B 49 2C 6F 3D 47 6F 76 65 72 6E ou=GPKI,o=Govern 0050: 6D 65 6E 74 20 6F 66 20 4B 6F 72 65 61 2C 63 3D ment of Korea,c= 0060: 4B 52 3F 63 65 72 74 69 66 69 63 61 74 65 52 65 KR?certificateRe 0070: 76 6F 63 61 74 69 6F 6E 4C 69 73 74 3B 62 69 6E vocationList;bin 0080: 61 72 79 30 3D A0 3B A0 39 86 37 68 74 74 70 3A ary0=.;.9.7http: 0090: 2F 2F 73 73 6C 2D 63 72 6C 2E 67 70 6B 69 2E 67 //ssl-crl.gpki.g 00A0: 6F 2E 6B 72 2F 63 72 6C 2F 43 41 31 33 31 31 30 o.kr/crl/CA13110 00B0: 30 30 30 31 2F 63 72 6C 33 70 31 64 70 32 2E 63 0001/crl3p1dp2.c 00C0: 72 6C rl
] Algorithm: [SHA256withRSA] Signature: 0000: 53 A2 63 21 C5 86 33 8B CD 7F 55 EB 7C BC 69 BA S.c!..3...U...i. 0010: E3 D8 B2 70 40 A2 11 9B AB E4 DB 23 9F 05 F0 61 ...p@......#...a 0020: 44 4D D9 27 1B 6B F3 CC 8F 2F 97 94 E3 8D 43 58 DM.'.k.../....CX 0030: C0 90 0B FF 16 F5 CC 23 9F 85 4C 2A B5 07 AF B3 .......#..L*.... 0040: AD 37 48 00 35 31 F3 12 43 D5 EE 64 24 0B 7E 0B .7H.51..C..d$... 0050: 18 89 4C E2 6B FC 32 0D 16 72 F2 36 3E B5 B1 74 ..L.k.2..r.6>..t 0060: 56 49 FB 7C D1 C1 57 28 43 79 1E EA 7E 2A 0E 87 VI....W(Cy...*.. 0070: 51 96 63 C4 7D DC 40 01 FC 95 0B BD B3 F8 03 F0 Q.c...@......... 0080: B4 F6 28 94 DD DC B9 83 F2 6B 0A EE 0D 9A 4B 95 ..(......k....K. 0090: 70 41 98 F5 D7 12 29 54 87 FF 75 DA 36 F0 D6 D3 pA....)T..u.6... 00A0: 0B 3A 66 8D 04 C4 AF 1D 64 3B D9 17 1F 51 D3 0C .:f.....d;...Q.. 00B0: 95 45 72 EE 34 28 8D 36 59 6A F5 42 56 01 79 2B .Er.4(.6Yj.BV.y+ 00C0: AC DC C2 C0 9E 7B 06 90 C8 20 72 B7 04 58 09 40 ......... r..X.@ 00D0: D8 88 7D 40 68 17 27 F6 0E 0C 3E 60 80 22 CC BA ...@h.'...>`.".. 00E0: 4E 2C 24 76 43 DA C9 9F 81 FE B3 8A E9 F7 EE 0C N,$vC........... 00F0: 6C B5 50 76 9E 9D D6 90 17 8B 1F 82 48 F4 6D 7F l.Pv........H.m.
]
Added certificate to keystore 'jssecacerts' using alias 'www.forest.go.kr-1'
#8: ObjectId: 2.5.29.31 Criticality=false Unparseable CRLDistributionPoints extension due to java.io.IOException: invalid URI name:ldap://cen.dir.go.kr:389/cn=crl3p1dp2,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary
0000: 30 81 BF 30 7E A0 7C A0 7A 86 78 6C 64 61 70 3A 0..0....z.xldap: 0010: 2F 2F 63 65 6E 2E 64 69 72 2E 67 6F 2E 6B 72 3A //cen.dir.go.kr: 0020: 33 38 39 2F 63 6E 3D 63 72 6C 33 70 31 64 70 32 389/cn=crl3p1dp2 0030: 2C 63 6E 3D 43 41 31 33 31 31 30 30 30 30 31 2C ,cn=CA131100001, 0040: 6F 75 3D 47 50 4B 49 2C 6F 3D 47 6F 76 65 72 6E ou=GPKI,o=Govern 0050: 6D 65 6E 74 20 6F 66 20 4B 6F 72 65 61 2C 63 3D ment of Korea,c= 0060: 4B 52 3F 63 65 72 74 69 66 69 63 61 74 65 52 65 KR?certificateRe 0070: 76 6F 63 61 74 69 6F 6E 4C 69 73 74 3B 62 69 6E vocationList;bin 0080: 61 72 79 30 3D A0 3B A0 39 86 37 68 74 74 70 3A ary0=.;.9.7http: 0090: 2F 2F 73 73 6C 2D 63 72 6C 2E 67 70 6B 69 2E 67 //ssl-crl.gpki.g 00A0: 6F 2E 6B 72 2F 63 72 6C 2F 43 41 31 33 31 31 30 o.kr/crl/CA13110 00B0: 30 30 30 31 2F 63 72 6C 33 70 31 64 70 32 2E 63 0001/crl3p1dp2.c 00C0: 72 6C rl
