force liberty to use JVM default truststore
up vote
0
down vote
favorite
How can i force liberty on cloud to use JVM default truststore, As i undrstood it is create a new truststore that include the CA.
I have tried the following in jmv.options:
-Djavax.net.ssl.trustStore=/opt/ibm/java/jre/lib/security
But it is still refere to :
CWWKS4104A: LTPA keys created in 0.801 seconds. LTPA key file: /opt/ibm/wlp/output/defaultServer/resources/security/ltpa.keys
[AUDIT ] CWPKI0803A: SSL certificate created in 1.830 seconds. SSL key file: /opt/ibm/wlp/output/defaultServer/resources/security/key.jks
Any advice to at beside the created file use default JVM truststore as cloudant is submitted there by default.
ssl
kubernetes ibm-cloud websphere-liberty truststore asked Nov 22 at 16:52
User
109318
add a comment |
up vote
0
down vote
favorite
How can i force liberty on cloud to use JVM default truststore, As i undrstood it is create a new truststore that include the CA.
I have tried the following in jmv.options:
-Djavax.net.ssl.trustStore=/opt/ibm/java/jre/lib/security
But it is still refere to :
CWWKS4104A: LTPA keys created in 0.801 seconds. LTPA key file: /opt/ibm/wlp/output/defaultServer/resources/security/ltpa.keys
[AUDIT ] CWPKI0803A: SSL certificate created in 1.830 seconds. SSL key file: /opt/ibm/wlp/output/defaultServer/resources/security/key.jks
Any advice to at beside the created file use default JVM truststore as cloudant is submitted there by default.
ssl
kubernetes ibm-cloud websphere-liberty truststore asked Nov 22 at 16:52
User
109318
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 at 9:33
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 at 18:10
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
How can i force liberty on cloud to use JVM default truststore, As i undrstood it is create a new truststore that include the CA.
I have tried the following in jmv.options:
-Djavax.net.ssl.trustStore=/opt/ibm/java/jre/lib/security
But it is still refere to :
CWWKS4104A: LTPA keys created in 0.801 seconds. LTPA key file: /opt/ibm/wlp/output/defaultServer/resources/security/ltpa.keys
[AUDIT ] CWPKI0803A: SSL certificate created in 1.830 seconds. SSL key file: /opt/ibm/wlp/output/defaultServer/resources/security/key.jks
Any advice to at beside the created file use default JVM truststore as cloudant is submitted there by default.
ssl
kubernetes ibm-cloud websphere-liberty truststore asked Nov 22 at 16:52
User
109318
How can i force liberty on cloud to use JVM default truststore, As i undrstood it is create a new truststore that include the CA.
I have tried the following in jmv.options:
-Djavax.net.ssl.trustStore=/opt/ibm/java/jre/lib/security
But it is still refere to :
CWWKS4104A: LTPA keys created in 0.801 seconds. LTPA key file: /opt/ibm/wlp/output/defaultServer/resources/security/ltpa.keys
[AUDIT ] CWPKI0803A: SSL certificate created in 1.830 seconds. SSL key file: /opt/ibm/wlp/output/defaultServer/resources/security/key.jks
Any advice to at beside the created file use default JVM truststore as cloudant is submitted there by default.
ssl
kubernetes ibm-cloud websphere-liberty truststore ssl
kubernetes ibm-cloud websphere-liberty truststore asked Nov 22 at 16:52
User
109318
asked Nov 22 at 16:52
User
109318
asked Nov 22 at 16:52
User
109318
asked Nov 22 at 16:52
User
109318
asked Nov 22 at 16:52
User
109318
109318
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 at 9:33
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 at 18:10
add a comment |
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 at 9:33
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 at 18:10
1
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 at 13:04
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 at 9:30
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 at 9:33
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 at 9:33
1
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 at 18:10
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 at 18:10
add a comment |
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53435393%2fforce-liberty-to-use-jvm-default-truststore%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53435393%2fforce-liberty-to-use-jvm-default-truststore%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 at 9:33
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 at 18:10