CSS Uploads Failing; Certificate errors causing SSLHandshakeExcept

[SBoxrucker]

While attempting to update our custom datasource, my Java based CSS upload
client has been failing. It has failed consistently over the last several
days, but worked early last week (and has actually been trouble free for
years).

The error is: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: Certificate signature validation
failed

I added a JVM debug switch and re-executed my upload script. In evaluating
the certificate chain, I find it curious that the certificate named
"Microsoft Secure Server Authority" (for "mappoint-cds.live.com") is valid in
this range - From: Thu Feb 26 15:54:45 CST 2009 To: Fri Feb 26 15:54:45 CST
2010

Since my last working upload was just a couple of days prior to the 26th, I
could see this being pertinent.

I have downloaded newer Microsoft intermediate certificates (for both
"Microsoft Internet Authority" and "Microsoft Secure Server Authority") but
the error returned is always the same.

Have certificates been changed in any way recently (within the last week) on
the MapPoint CSS side?

Thanks

[SBoxrucker]

I successfully worked through this problem with MapPoint support; Actually,
the problem started on Feb. 26th - when the certificate named "Microsoft
Secure Server Authority" (for "mappoint-cds.live.com") was activated.

Bottom line, the process for saving the required pair of certificates has
been modified slightly. The process documented here:
(http://go.mappoint.net/mappointmpac/default.aspx?main=article.aspx&id=J30012)
may have been followed in the past.

Instead, try the following steps:

To download the 4th-level certificate:

1) In IE, navigate to the customer data service web service URL:
(https://mappoint-cds.live.com/CustomerData-30/CustomerDataService.asmx)
2) Click on the lock beside address bar
3) Click "View Certificates"
4) Click Details tab
5) Click "Copy to file.." button
6) Follow instructions to download certificate file

To download the 3rd-level certificate, continue from step 3 above then:

4A) Click "Certification Path" tab and click "Microsoft Secure Server
Authority"
(the 3rd certificate on the path)
5A) Click "View Certificate"
6A) Click Details tab
7A) Click "Copy to file.." button
8A) Follow instructions to download certificate file
--
Steve Boxrucker

Post by SBoxrucker
While attempting to update our custom datasource, my Java based CSS upload
client has been failing. It has failed consistently over the last several
days, but worked early last week (and has actually been trouble free for
years).
sun.security.validator.ValidatorException: Certificate signature validation
failed
I added a JVM debug switch and re-executed my upload script. In evaluating
the certificate chain, I find it curious that the certificate named
"Microsoft Secure Server Authority" (for "mappoint-cds.live.com") is valid in
this range - From: Thu Feb 26 15:54:45 CST 2009 To: Fri Feb 26 15:54:45 CST
2010
Since my last working upload was just a couple of days prior to the 26th, I
could see this being pertinent.
I have downloaded newer Microsoft intermediate certificates (for both
"Microsoft Internet Authority" and "Microsoft Secure Server Authority") but
the error returned is always the same.
Have certificates been changed in any way recently (within the last week) on
the MapPoint CSS side?
Thanks
--
Steve Boxrucker