error while mailing from Java (SSLHandShake Exception)

Question

I am getting following exception while sending mails from Java.

31/03 14:06:19:571 INFO [ ] IBSUtils sendMailfromsmtp() MessagingException in Sending Mail :javax.mail.MessagingException: Can't send command to SMTP host;
nested exception is:
    javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed

It's sending mails in stand alone java programs but while running from JBoss server its throwing this exception. Code has been working from six months but suddenly its starts throwing this exception.

Seems some certificate Expired.

Try seeing and understanding this http://stackoverflow.com/questions/9619030/resolving-javax-net-ssl-sslhandshakeexception-sun-security-validator-validatore/12524960#12524960 — NDeveloper, Apr 04 '14 at 08:15

score 1 · Accepted Answer · answered Apr 01 '14 at 05:44

1

I've ever get this kind of error when my application(IBM Java 1.6) handle connection with webserver(Oracle Java 1.6). There might be Handshake exception while negotiating SSH protocol.

You'd better set your Java protocol manually.

// Using IBM jre there will be a handshake failure as IBM java 1.6 will
// negotiate to server SSLv3 protocol while it SHOULD be TLSv1
    System.setProperty("https.protocols", "TLSv1");

answered Apr 01 '14 at 05:44

Alexer

51
4

Thanks man... it works great... Any possible issues with this code.. @alexer – hacker Apr 07 '14 at 07:08

score 0 · Answer 2 · answered Apr 01 '14 at 05:39

0

Seems some certificate Expired.

Correct. The server certificate has expired. Get it renewed, or complain to them if you can't get it done yourself.

Or else it hasn't come into its validity period yet.

answered Apr 01 '14 at 05:39

user207421

305,947
44
307
483

thanks @ejp but about Server Certificate, can you give me some more information about this certificate i mean Location of this file and checking its expiry date.. – hacker Apr 01 '14 at 05:44

score 0 · Answer 3 · answered Apr 01 '14 at 06:04

Answering your request on how to get get information about the probably expired certificate:

Find out which server your mail is delivered to. Where this is configured depends on you utility class for sending mail, JEE style is to get it from a mail session configured in jboss.
Assuming you deliver your mail to somehost on port 25 you could use openssl s_client to perform a TLS handshake to get the certificate:

openssl s_client -starttls smtp -crlf -connect somehost:25

This gives you the certificate itself (the base64 encoded part between the "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE----- " delimiters and some basic information abobout it. Store the certificate including the delimiting lines in a file, say cert.pem.

You can then decode it using

openssl x509 -text -noout <cert.pem

This gives you all the information in the certificate as readable text.

thanks for ur info , but for openssl do I need to install any application .exe.. in windows. — hacker, Apr 01 '14 at 07:01

error while mailing from Java (SSLHandShake Exception)

3 Answers3