novitski / bitcoinj

Automatically exported from code.google.com/p/bitcoinj
Apache License 2.0
0 stars 0 forks source link

Payment Protocol tool is not accepting my payment request. #603

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
Here is the error, the payment request was created with bitcoinj 12, I used my 
ssl pem to create the keystore with the root certificate included in that pem, 
with my key.

I am using java 7, which some people said could be the problem.

Failed whilst retrieving payment URL: 
org.bitcoinj.protocols.payments.PaymentProtocolException$PkiVerificationExceptio
n: java.security.cert.CertPathValidatorException: Path does not chain with any 
of the trust anchors
java.util.concurrent.ExecutionException: 
org.bitcoinj.protocols.payments.PaymentProtocolException$PkiVerificationExceptio
n: java.security.cert.CertPathValidatorException: Path does not chain with any 
of the trust anchors
    at java.util.concurrent.FutureTask.report(FutureTask.java:122)
    at java.util.concurrent.FutureTask.get(FutureTask.java:188)
    at PaymentProtocolTool.dump(PaymentProtocolTool.java:57)
    at PaymentProtocolTool.main(PaymentProtocolTool.java:44)
Caused by: 
org.bitcoinj.protocols.payments.PaymentProtocolException$PkiVerificationExceptio
n: java.security.cert.CertPathValidatorException: Path does not chain with any 
of the trust anchors
    at org.bitcoinj.protocols.payments.PaymentProtocol.verifyPaymentRequestPki(PaymentProtocol.java:234)
    at org.bitcoinj.protocols.payments.PaymentSession.<init>(PaymentSession.java:209)
    at org.bitcoinj.protocols.payments.PaymentSession$1.call(PaymentSession.java:178)
    at org.bitcoinj.protocols.payments.PaymentSession$1.call(PaymentSession.java:171)
    at java.util.concurrent.FutureTask.run(FutureTask.java:262)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:744)
Caused by: java.security.cert.CertPathValidatorException: Path does not chain 
with any of the trust anchors
    at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:208)
    at java.security.cert.CertPathValidator.validate(CertPathValidator.java:279)
    at org.bitcoinj.protocols.payments.PaymentProtocol.verifyPaymentRequestPki(PaymentProtocol.java:199)
    ... 7 more

Original issue reported on code.google.com by gweedo...@gmail.com on 31 Jan 2015 at 11:11

GoogleCodeExporter commented 9 years ago
Well, what root are you using? The error is saying that it doesn't recognise 
your CA.  Java 7 shouldn't be an issue, but iirc the trust store in Java 8 is a 
lot larger in size and more comparable to what browsers use. 

Original comment by mh.in.en...@gmail.com on 1 Feb 2015 at 1:51

GoogleCodeExporter commented 9 years ago
I am using comodo as my CA. 

Original comment by gweedo...@gmail.com on 1 Feb 2015 at 5:01

GoogleCodeExporter commented 9 years ago
You need to be more specific than that. They have several roots. Do you have an 
SSL server using that cert anywhere?

Original comment by mh.in.en...@gmail.com on 1 Feb 2015 at 5:11

GoogleCodeExporter commented 9 years ago
I don't have this SSL on a server. 

Also just to make sure, I built my pem as...

ssl certificate then domain validation certificate then CA certificate. Then 
input my key into openssl and created the p12 file, which then created the 
keystore from the keystore program with java. 

I also explored the keystore made sure all that information is found inside and 
it was.

Original comment by gweedo...@gmail.com on 1 Feb 2015 at 5:29

Attachments:

GoogleCodeExporter commented 9 years ago
Can you attach the payment request message? I'll try and take a look next week.

Original comment by mh.in.en...@gmail.com on 1 Feb 2015 at 6:18

GoogleCodeExporter commented 9 years ago
Here is a payment request.

Original comment by gweedo...@gmail.com on 1 Feb 2015 at 8:29

Attachments:

GoogleCodeExporter commented 9 years ago
Any chance you got to look at this? It happens with the test-valid-cert as well.

Original comment by italian...@gmail.com on 3 Mar 2015 at 7:19