Hi,

I am checking the certificate expiry of the plugin certificate and found 2 certificates with different expiry .

$ gsk7capicmd -keydb -expiry -db "/usr/IBM/WebSphere/Plugins/etc/plugin-key.kdb" -pw WebAS

Validity: Thursday, 26 April 2012 23:20:31 PM GMT+08:00

$ gsk7capicmd -keydb -expiry -db "/usr/IBM/WebSphere/Plugins/config/ihs-01/plugin-key.kdb" -pw WebAS
Validity: 0
The certificate under config path shows its not a expiry one ,but the cert under etc shows it will expire on April 26th which is already overdue.

Can anyone tell me which certificate does the plugin refer ?

The cert under config or etc ?

Please help.

Hi Ganesh,

  You can check what certificate are you using looking at the HTTPS transport sections in the plugin-cfg.xml, an example:

 
           
           

 
  Normally under config directory you have files that are synchronize through admin console.

  hope this helps,

regards,

Thank you so much Gabriel

oppsss the example, was removed!!!!

  Transport Hostname="mynode" Port="9443" Protocol="https">
            Property Name="keyring" Value="E:\WebSphere\Plugins/config/webserver1/plugin-key.kdb"
            Property Name="stashfile" Value="E:\WebSphere\Plugins/config/webserver1/plugin-key.sth"

regards,

Hi,

This shoud be ur web server kdb file, if your web server is ihs-01

$ gsk7capicmd -keydb -expiry -db "/usr/IBM/WebSphere/Plugins/config/ihs-01/plugin-key.kdb" -pw WebAS

Regards
Ashraf