Compatibilità cacerts con le versioni java

Question

Sto generando cacerts utilizzando JDK1.6 keytool.

Poi Sto usando questo file usando JRE1.7 cacerts, ma ottengo eccezione come:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed 
     at sun.security.ssl.Alerts.getSSLException(Unknown Source) 
     at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source) 
     at sun.security.ssl.Handshaker.fatalSE(Unknown Source) 
     at sun.security.ssl.Handshaker.fatalSE(Unknown Source) 
     at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source) 
     at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source) 
     at sun.security.ssl.Handshaker.processLoop(Unknown Source) 
     at sun.security.ssl.Handshaker.process_record(Unknown Source) 
     at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source) 
     at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source) 
     at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) 
     at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) 
     at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source) 
     at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source) 
     at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(Unknown Source) 
     at com.sun.identity.setup.OpenSSOConfigurator.main(OpenSSOConfigurator.java:172) 
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed 
     at sun.security.validator.PKIXValidator.doValidate(Unknown Source) 
     at sun.security.validator.PKIXValidator.engineValidate(Unknown Source) 
     at sun.security.validator.Validator.validate(Unknown Source) 
     at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source) 
     at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source) 
     at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source) 
     ... 12 more 
Caused by: java.security.cert.CertPathValidatorException: signature check failed 
     at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source) 
     at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(Unknown Source) 
     at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source) 
     at java.security.cert.CertPathValidator.validate(Unknown Source) 
     ... 18 more 
Caused by: java.security.SignatureException: Signature does not match. 
     at sun.security.x509.X509CertImpl.verify(Unknown Source) 
     at sun.security.provider.certpath.BasicChecker.verifySignature(Unknown Source) 
     at sun.security.provider.certpath.BasicChecker.check(Unknown Source) 
     ... 22 more 
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed 
     at sun.security.ssl.Alerts.getSSLException(Unknown Source) 
     at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source) 
     at sun.security.ssl.Handshaker.fatalSE(Unknown Source) 
     at sun.security.ssl.Handshaker.fatalSE(Unknown Source)2015-01-07 19:22:02 IST - ERROR: Problems - bootstrap file not created 

È questo il problema di compatibilità? Sono i cacerti generati utilizzando una versione di java non compatibile con un'altra versione di java?

Answer 1

Come già spiegato in another answer

La risposta al vostro problema è si utilizza Sun come provider di chiavi Java 6 è stato rilasciato prima di Oracle acquisto SUN e Java 7 è stato rilasciato dopo e molti dei pacchetti Sun sono ora deprecati.

Per maggiori dettagli leggere la documentazione ufficiale: Java Cryptography Architecture Oracle Providers Documentation for Java Platform Standard Edition 7