Java CA key usage check failed: keyCertSign bit is not set

摘要:Java CA key usage check failed: keyCertSign bit is not set


Java CA key usage check failed: keyCertSign bit is not set

Server 从 Ubuntu 10 升级到 12.04时,Java 也从Sun Java 6 变成OpenSDK

却在调用远端的https连线时,出现了以下错误。


此因在Windows上,并不会发生这个问题,

网络的解说,约是,升级的问题,或升级后发生的问题,或只有在Linux环境下会发生

或Java在这方面比较严谨。

而找了很多方法后,就是砍掉旧有的OpenSDK,装新的sun java jdk 就解决了。


sun.security.validator.ValidatorException:

PKIX path validation failed: java.security.cert.CertPathValidatorException: CA key usage check failed: keyCertSign bit is not set



http://www.gaggl.com/2012/04/installing-java6-jdk-on-ubuntu-12-04/


wget https://github.com/flexiondotorg/oab-java6/raw/0.2.1/oab-java6.sh -O oab-java6.sh

chmod +x oab-java6.sh

sudo ./oab-java6.sh


sudo apt-get purge sun-java


mkdir ~/src

cd ~/src

git clone https://github.com/flexiondotorg/oab-java6.git

cd ~/src/oab-java6

sudo ./oab-java.sh


sudo apt-get install sun-java6-plugin sun-java6-jre sun-java6-bin sun-java6-jdk


tail -f ~/src/oab-java6/oab-java.sh.log