WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Is it possible to import all the certs from another keystore into WAS keystore in one go?

    Posted 01/30/13 06:20 PM
    Hi,

    Would like to know is it possible to import all the certs from one keystore into WAS keystore in one go?

    My client has a legacy system on Jboss, now migrating to WAS7, when the application started, it complained "could not build a valid CertPath", as signer cert from Jboss not imported into WAS, the issue is, once I imported one cert, application will complain another cert not there, there are 200 more signer certs in total, so is it possible to do that import at one go?

    Thanks,
    Eric 


  • 2.  Is it possible to import all the certs from another keystore into WAS keystore in one go?

    Posted 01/30/13 08:44 PM
    Jython code I am afraid is the way to go. Maybe the IBM GSKit can help?

    pic.dhe.ibm.com/infocenter/wasinfo/v8r0/...

    Regards

    Steve


  • 3.  Is it possible to import all the certs from another keystore into WAS keystore in one go?

    Posted 01/31/13 05:13 PM
    Thanks, Steve.

    gsk7cmd + Unix shell program should able to do that.

    Right now exploring possibility of using pure Jython code running with wsadmin, please let me know if there is any info available.

    Thanks
    Eric


  • 4.  Is it possible to import all the certs from another keystore into WAS keystore in one go?

    Posted 02/01/13 01:06 PM
    Hi Eric,

      Do you try to define new SSL repository pointing to your jks repository (JBOSS) and exchange certificates between repositories through adminconsole?

      Hope this help.  Let us if you need more support.

    regards