java.security.cert.CertificateExpiredException: NotAfter:...

Question

Level 1

4 points

java.security.cert.CertificateExpiredException: NotAfter:...

We've just started getting the following error message anytime we try to connect to our iTunes U site.

ITunesU.invokeAction(): I/O Exception
javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateExpiredException: NotAfter: Sat Dec 13 15:59:59 PST 2008

I'm not sure what the relevance of that date is...
This isn't related to any SSL certificate on our side... and it doesn't seem to matter where I run the object.

N/A, Other OS, Cannot Connect to iTunes U

Posted on Dec 17, 2008 11:08 AM

Reply

Answer 1

Brien Malone Author

Level 1

4 points

Dec 17, 2008 11:43 AM in response to Brien Malone

That last sentence may need a little explanation. The error appears to be related to an expired SSL certificate, but one on Apple's side, not my server side. We're building the connection string using a java class (from the example). I have installed the class on a number of different servers and none work.

Reply

Answer 2

Brien Malone Author

Level 1

4 points

Dec 18, 2008 1:34 PM in response to Duncan Bernhardt

Interesting. I never really understood why Apple didn't just register that domain name. I've updated my hosts file to point to that IP, but I'm still getting the same error.

ITunesU.invokeAction(): I/O Exception javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateExpiredException: NotAfter: Sat Dec 13 15:59:59 PST 2008

Reply

Answer 3

Dec 18, 2008 2:18 PM in response to Brien Malone

Please, don't hard code this IP address. It can change without notice. In fact this happened recently which is why you are having the issue. You are trying to access the old deimos ip address instead of the current one.

What does "nslookup deimos.apple.com" return?

The certificate on the current deimos host is valid, the issue you are experiencing is related to you trying to access the old host.

Reply

Answer 4

Brien Malone Author

Level 1

4 points

Dec 18, 2008 5:13 PM in response to Duncan Bernhardt

The server on my end didn't have a DNS address configured (Its our production web server and typically doesn't need that sort of thing.) I've added a DNS entry. deimos now resolves to the address you listed below and now its working.

Thank you for the help!

Reply

Answer 5

Dec 17, 2008 12:26 PM in response to Brien Malone

It is likely that your DNS is not pointing to deimos correctly. deimos.apple.com should resolve to 17.152.19.253.

Reply