force liberty to use JVM default truststore
How can i force liberty on cloud to use JVM default truststore, As i undrstood it is create a new truststore that include the CA.
I have tried the following in jmv.options:
-Djavax.net.ssl.trustStore=/opt/ibm/java/jre/lib/security
But it is still refere to :
CWWKS4104A: LTPA keys created in 0.801 seconds. LTPA key file: /opt/ibm/wlp/output/defaultServer/resources/security/ltpa.keys
[AUDIT ] CWPKI0803A: SSL certificate created in 1.830 seconds. SSL key file: /opt/ibm/wlp/output/defaultServer/resources/security/key.jks
Any advice to at beside the created file use default JVM truststore as cloudant is submitted there by default.
ssl kubernetes ibm-cloud websphere-liberty truststore
asked Nov 22 '18 at 16:52
UserUser
116319
add a comment |
How can i force liberty on cloud to use JVM default truststore, As i undrstood it is create a new truststore that include the CA.
I have tried the following in jmv.options:
-Djavax.net.ssl.trustStore=/opt/ibm/java/jre/lib/security
But it is still refere to :
CWWKS4104A: LTPA keys created in 0.801 seconds. LTPA key file: /opt/ibm/wlp/output/defaultServer/resources/security/ltpa.keys
[AUDIT ] CWPKI0803A: SSL certificate created in 1.830 seconds. SSL key file: /opt/ibm/wlp/output/defaultServer/resources/security/key.jks
Any advice to at beside the created file use default JVM truststore as cloudant is submitted there by default.
ssl kubernetes ibm-cloud websphere-liberty truststore
asked Nov 22 '18 at 16:52
UserUser
116319
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 '18 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 '18 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 '18 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 '18 at 9:33
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 '18 at 18:10
add a comment |
How can i force liberty on cloud to use JVM default truststore, As i undrstood it is create a new truststore that include the CA.
I have tried the following in jmv.options:
-Djavax.net.ssl.trustStore=/opt/ibm/java/jre/lib/security
But it is still refere to :
CWWKS4104A: LTPA keys created in 0.801 seconds. LTPA key file: /opt/ibm/wlp/output/defaultServer/resources/security/ltpa.keys
[AUDIT ] CWPKI0803A: SSL certificate created in 1.830 seconds. SSL key file: /opt/ibm/wlp/output/defaultServer/resources/security/key.jks
Any advice to at beside the created file use default JVM truststore as cloudant is submitted there by default.
ssl kubernetes ibm-cloud websphere-liberty truststore
asked Nov 22 '18 at 16:52
UserUser
116319
How can i force liberty on cloud to use JVM default truststore, As i undrstood it is create a new truststore that include the CA.
I have tried the following in jmv.options:
-Djavax.net.ssl.trustStore=/opt/ibm/java/jre/lib/security
But it is still refere to :
CWWKS4104A: LTPA keys created in 0.801 seconds. LTPA key file: /opt/ibm/wlp/output/defaultServer/resources/security/ltpa.keys
[AUDIT ] CWPKI0803A: SSL certificate created in 1.830 seconds. SSL key file: /opt/ibm/wlp/output/defaultServer/resources/security/key.jks
Any advice to at beside the created file use default JVM truststore as cloudant is submitted there by default.
ssl kubernetes ibm-cloud websphere-liberty truststore
ssl kubernetes ibm-cloud websphere-liberty truststore
asked Nov 22 '18 at 16:52
UserUser
116319
asked Nov 22 '18 at 16:52
UserUser
116319
asked Nov 22 '18 at 16:52
UserUser
116319
asked Nov 22 '18 at 16:52
UserUser
116319
asked Nov 22 '18 at 16:52
UserUser
116319
116319
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 '18 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 '18 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 '18 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 '18 at 9:33
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 '18 at 18:10
add a comment |
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 '18 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 '18 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 '18 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 '18 at 9:33
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 '18 at 18:10
1
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 '18 at 13:04
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 '18 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 '18 at 9:30
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 '18 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 '18 at 9:33
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 '18 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 '18 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 '18 at 9:33
1
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 '18 at 18:10
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 '18 at 18:10
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53435393%2fforce-liberty-to-use-jvm-default-truststore%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53435393%2fforce-liberty-to-use-jvm-default-truststore%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
In general you should add required certificates to the Liberty truststore instead of default JVM truststore. Please explain in more details what you are trying to achieve. Attach any stacktrace with errors that you see. LTPA key file has noting to do with connection with the cloudant.
– Gas
Nov 23 '18 at 13:04
@Gas, my main issue is when trying to use cloudant within a liberty application it gives me the following exception "handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: PKIXCertPathBuilderImpl could not build a valid CertPath." and when i searched i found the cloudant registered at the default JVM truststore but liberty not using the default JVM truststore it create its own key.jsk
– User
Nov 26 '18 at 9:30
what i am trying to do is to force liberty to use default jvm instead of key.js or use both
– User
Nov 26 '18 at 9:33
P.s.: it is not recommended to import the certificate as per this link: console.bluemix.net/docs/services/Cloudant/offerings/…
– User
Nov 26 '18 at 9:33
1
Are you using CF or Kubernetes for Liberty and for Cloudant? In the link it says that it is not recommended to use current certificate as it is subject to change, but you should import parent certs, which is what error is saying - it cannot find all required certs.
– Gas
Nov 27 '18 at 18:10