keystore question

[John Graham <jc...@hotmail.com>]

Hello,

I'm using a geronimo-based app to connect to an SSL-based LDAP server. When I initially connected I got an error indicating I needed to add the server's certficate to Geronimo's keystore. So I used the web interface to do that, and it added the requisite certificate to a file called "ssl-keystore-1". When I connected again, after restarting my app, I get the same "can't find valid certification path to requested target". 

I used the linux 'strace' command to examine the system calls the java process was making, and found it was *not* opening "ssl-keystore-1", but a file called "keystore". So I presume this is the heart of the problem. After googling a bit, I notice there used to be a keystoreLocation parameter for geronimo, but I don't have the ability to configure that in my deployment. Likewise, I tried setting JAVA_OPT= -Djavax.net.ssl.trustStore=<path of ssl-keystore-1>, and restarted my app. Still the same error, and the java process was still opening up "keystore". 

Does anyone know how to resolve this problem? 

Thanks,
- J o h n

Re: keystore question

[Vamsavardhana Reddy <c1...@gmail.com>]

Which version of Geronimo are you using?  You should be able to see what
value is set for *javax.net.ssl.trustStore system property through the JVM
portlet in Admin Console.

*
On Jan 17, 2008 3:12 AM, John Graham <jc...@hotmail.com> wrote:

>  Hello,
>
> I'm using a geronimo-based app to connect to an SSL-based LDAP server.
> When I initially connected I got an error indicating I needed to add the
> server's certficate to Geronimo's keystore. So I used the web interface to
> do that, and it added the requisite certificate to a file called
> "ssl-keystore-1". When I connected again, after restarting my app, I get the
> same "can't find valid certification path to requested target".
>
> I used the linux 'strace' command to examine the system calls the java
> process was making, and found it was *not* opening "ssl-keystore-1", but a
> file called "keystore". So I presume this is the heart of the problem. After
> googling a bit, I notice there used to be a keystoreLocation parameter for
> geronimo, but I don't have the ability to configure that in my deployment.
> Likewise, I tried setting JAVA_OPT= *-Djavax.net.ssl.trustStore=<path of
> ssl-keystore-1>, and restarted my app. Still the same error, and the java
> process was still opening up "keystore".
>
> Does anyone know how to resolve this problem?
>
> Thanks,
> - J o h n
> *
>