Search code examples
javasslhttpskeystore

Couldn't execute postMethod: Javax.net.ssl.SslException: Revoked by CRL

I have a POST method:

PostMethod post = new PostMethod(myPostUrl);

Then I execute the PostMethod:

httpClient.executeMethod(post);

When I try to execute it, I get an exception such as:

javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Revoked by CRL (cached response)

What causes this?

Solution

  • java.security.cert.CertificateException: Revoked by CRL (cached response)

    It's all in the error message: the certificate of the server you're trying to contact has been revoked and is therefore no longer valid.

    Certificates can revoked during the course of their normal validity period (the notBefore and notAfter timestamps with which they are issued) for a number of reasons. A well configured SSL/TLS client should generally check with the CA for revocation if possible. This check was performed against the CRL here, and it appears the CA has revoked the certificate of the server you're trying to connect to. The genuine server should present a certificate that has not been revoked.