library does not work with IBM JRE because of "Sunx509" SSL Algorithm about javapns HOT 12 CLOSED

Sorry, I didn't see Issue 39 ...

I added the suggested code.

Try the testing version 1.6.4 in the downloads section and let me know how it 
goes.

So sorry to be annoying here (I'm the one who submitted the issue #39)

But there are quite a few deployments live yet on the IBM WebSphere 6.X
It runs on JVM 1.5 yet.
Will you please apply a fix for the java 1.5?

Many thanks

Done

Hi~

I have an error with IBM JDK 1.5.

*JVM INFO
==================
java version "1.5.0"
Java(TM) 2 Runtime Environment, Standard Edition (build pwi32pdev-20070426a)
IBM J9 VM (build 2.3, J2RE 1.5.0 IBM J9 2.3 Windows XP x86-32 
j9vmwi3223-20070426 (JIT enabled)
J9VM - 20070420_12448_lHdSMR
JIT  - 20070419_1806_r8
GC   - 200704_19)
JCL  - 20070423
==================

* ERROR
==================
12:11:29.953 [main] ERROR c.n.a.i.ApnsFeedbackConnection - Couldn't get 
feedback connection
java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: 
com.ibm.jsse2.util.h: End user tried to act as a CA
        at com.notnoop.apns.internal.Utilities.parseFeedbackStreamRaw(Utilities.java:201) ~[javapns2.jar:na]
        at com.notnoop.apns.internal.Utilities.parseFeedbackStream(Utilities.java:211) ~[javapns2.jar:na]
        at com.notnoop.apns.internal.ApnsFeedbackConnection.getInactiveDevicesImpl(ApnsFeedbackConnection.java:87) ~[javapns2.jar:na]
        at com.notnoop.apns.internal.ApnsFeedbackConnection.getInactiveDevices(ApnsFeedbackConnection.java:67) ~[javapns2.jar:na]
        at com.notnoop.apns.internal.AbstractApnsService.getInactiveDevices(AbstractApnsService.java:99) [javapns2.jar:na]
        at my.test.APNSTest.main(APNSTest.java:34) [javapns2.jar:na]
Caused by: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: End user 
tried to act as a CA
        at com.ibm.jsse2.n.a(n.java:15) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.jc.a(jc.java:171) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.db.a(db.java:129) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.db.a(db.java:333) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.eb.a(eb.java:145) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.eb.a(eb.java:274) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.db.m(db.java:330) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.db.a(db.java:149) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.jc.a(jc.java:450) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.jc.g(jc.java:115) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.jc.a(jc.java:347) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.e.read(e.java:13) ~[na:5.0 build_20070313]
        at java.io.DataInputStream.readFully(DataInputStream.java:202) ~[na:1.5.0]
        at java.io.DataInputStream.readInt(DataInputStream.java:380) ~[na:1.5.0]
        at com.notnoop.apns.internal.Utilities.parseFeedbackStreamRaw(Utilities.java:192) ~[javapns2.jar:na]
        ... 5 common frames omitted
Caused by: com.ibm.jsse2.util.h: End user tried to act as a CA
        at com.ibm.jsse2.util.g.a(g.java:121) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.util.g.a(g.java:10) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.util.g.b(g.java:26) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.util.e.a(e.java:19) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.yb.checkServerTrusted(yb.java:58) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.hb.checkServerTrusted(hb.java:10) ~[na:5.0 build_20070313]
        at com.ibm.jsse2.eb.a(eb.java:102) ~[na:5.0 build_20070313]
        ... 15 common frames omitted
==================

Help me.. please~

Thanks.

Did you see:
https://www-304.ibm.com/support/docview.wss?uid=swg21426286

can you verify your cert is 'certificate extension labeled "CA"'

also check:
http://www.mqseries.net/phpBB2/viewtopic.php?t=49364

Thanks for your answer.

I don't know that my cert is 'certificate extension labeled "CA"'.

Can I know how to verify my cert?

The easy way... is to visit the link I sent you (it has lots of info).

Otherwise... you'll need OpenSSL.

http://www.tech-recipes.com/rx/447/view-the-details-of-a-certificate-signing-req
uest-with-openssl/
http://mediakey.dk/~cc/view-x509-certificate-details/

http://wiki.samat.org/CheatSheet/OpenSSL

Apparently, this is a bug in IBM JDK 1.5.
IBM JDK 1.6 is OK with Apple's certificate.

I'm trying to run this on WebSphere 6.1.  So, is the solution to upgrade to WAS 
7 so that I can run it against a 1.6 JDK?

If I can't upgrade to WAS 7 and must use WAS 6.1, is it then impossible to do 
APNS push notifications?

I solved it!
use IbmPKIX trust manager.

http://academicwritingtips.org/component/k2/item/899-entrust.html?tmpl=component
&print=1

Closing as fixed, as per previous comments confirming the issue was resolved.