osgi:install https:// fails - how to provide custom client certifcate

[flangel <fr...@frankjlangel.com>]

Hi,

I want to install bundles from the Karaf shell that are located on remote
HTTPS server.
HTTPS Server is secured with client certificate. I am using osgi:install
https://......jar>. 

I already set the additional arguments on the JVM 

-Djavax.net.ssl.keyStore=/..../ks.p12 
-Djavax.net.ssl.keyStoreType=pkcs12 
-Djavax.net.ssl.keyStorePassword=xxx

and put the cacerts in /lib/security of the JRE

but it still fails with 

	... 11 more
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert:
handshake_failure
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)[:1.7.0_45]
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)[:1.7.0_45]
	at
sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1959)[:1.7.0_45]
	at
sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1077)[:1.7.0_45]
	at
sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)[:1.7.0_45]
	at
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)[:1.7.0_45]
	at
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)[:1.7.0_45]
	at
sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)[:1.7.0_45]
	at
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)[:1.7.0_45]

Are there some specific settings in Karaf that I need to set ?

Thanks a lot
Frank




--
View this message in context: http://karaf.922171.n3.nabble.com/osgi-install-https-fails-how-to-provide-custom-client-certifcate-tp4035265.html
Sent from the Karaf - User mailing list archive at Nabble.com.