Building a Credential from a Signature

[Cantor, Scott]

On 12/31/13, 7:48 PM, "Matthew Berry" <matthew.william.berry at gmail.com>
wrote:

>> I keep hitting troubles deep in the bowels of
>> org.apache.commons.ssl.TrustMaterial which leads me to believe I'm on
>> the wrong track. The goal is simply to extract the Credential,...

Which is what that code is used for, it's the X.509 certificate
parsing/loading code used by the old library.

>The troubles I'm facing seem to stem from my copy of
>lib/security/cacerts containing no entries in it.
>The not-yet-commons-ssl library expects there to be at least one entry
>in there or in jsse_cacerts.

Could be. That would indeed be a bug, but in a basically dead library I
suspect.

>So maybe this is where I am going wrong, but I feel like it shouldn't
>matter one bit who the cacerts
> file claims I trust.

No, but that doesn't help much. I'm sure among many reasons that's a good
justification for us having dumped it for the next version.

-- Scott