Java CA key usage check failed: keyCertSign bit is not set

摘要:Java CA key usage check failed: keyCertSign bit is not set
Java CA key usage check failed: keyCertSign bit is not set
Server 从 Ubuntu 10 升级到 12.04时,Java 也从Sun Java 6 变成OpenSDK
却在调用远端的https连线时,出现了以下错误。
此因在Windows上,并不会发生这个问题,
网络的解说,约是,升级的问题,或升级后发生的问题,或只有在Linux环境下会发生
或Java在这方面比较严谨。
而找了很多方法后,就是砍掉旧有的OpenSDK,装新的sun java jdk 就解决了。
sun.security.validator.ValidatorException:
PKIX path validation failed: java.security.cert.CertPathValidatorException: CA key usage check failed: keyCertSign bit is not set
http://www.gaggl.com/2012/04/installing-java6-jdk-on-ubuntu-12-04/
wget https://github.com/flexiondotorg/oab-java6/raw/0.2.1/oab-java6.sh -O oab-java6.sh
chmod +x oab-java6.sh
sudo ./oab-java6.sh
sudo apt-get purge sun-java
mkdir ~/src
cd ~/src
git clone https://github.com/flexiondotorg/oab-java6.git
cd ~/src/oab-java6
sudo ./oab-java.sh
sudo apt-get install sun-java6-plugin sun-java6-jre sun-java6-bin sun-java6-jdk
tail -f ~/src/oab-java6/oab-java.sh.log