Server SSL Error - Use your trusted certificate

Sometimes users experience the following error when opening a file from an HTTPS link:

"Server SSL error  

The server you are connecting to does not have a valid certificate from an authorised authority".

This happens if the server certificate is not issued by a recognised / trusted certification authority, but instead it is self signed or issued by a private CMS.

If you trust the server, you can add the server certificate to your trusted Java key store, and allow Omniscope to use it as trusted and verified certificate.

The cause of the problem and solution are explained in this article.

Here is what you need to do to enable Omniscope access the URL from your server (e.g. "https:// yourserver.com/") and recognise the server certificate:

1. Download InstallCert.zip archive attached to this forum post and unzip it (it contains two java class files: InstallCert$SavingTrustManager.class, InstallCert.class), put both of them in a folder (e.g. c:\your_path\)

2. Open command prompt (cmd.exe) and change current dir to the folder containing the class files from step 1 (e.g. cd c:\your_path\) then execute this command:

• java InstallCert yourserver.com:443
  
  Note: if you don't have java installed, use the java executable located at:
  
  - {YOUR_OMNISCOPE_INSTALLATION_PATH}\x86\bin\java (if you have a 32 bit OS)
  - {YOUR_OMNISCOPE_INSTALLATION_PATH}\x64\bin\java (if you have a 64 bit OS)
  
  {YOUR_OMNISCOPE_INSTALLATION_PATH} - this is where Omniscope is installed on your machine (e.g. C:\Users\yourusername\AppData\Local\Visokio Omniscope app)
  
  (to check whether you have a 32-bit or 64-bit OS: open Control Panel -> System and check 'System type:')
  The command may look like this: "{YOUR_OMNISCOPE_INSTALLATION_PATH}\x64\bin\java" InstallCert yourserver.com:443
  
  If you get the SSL error - handshake alert: unrecognized_name while executing this command please read this post: handshake alert: unrecognized_name
  
  

3. You will be asked 'Enter certificate to add to trusted keystore or 'q' to quit: [1]', press 1 then press ENTER

Note: After executing step 3, this message will be displayed in the console:

Added certificate to keystore 'jssecacerts' using alias 'yourserver.com-1'

which means that this particular certificate will be trusted by java applications if 'jssecacerts' keystore is provided

Notice that 'jssecacerts' file has been created in the folder you executed the command (e.g. c:\your_path\)

4. Open 'installconfig.properties' file located at {YOUR_OMNISCOPE_INSTALLATION_PATH}

5. Edit the file to add / edit this line:

ADDITIONAL_JVM_ARGS=-Djavax.net.ssl.trustStore="c:\your_path\jssecacerts"

6. Restart Omniscope 

0 Votes