WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Adding Multiple Keystores and Truststores in Generic JVM arguments

  • 1.  Adding Multiple Keystores and Truststores in Generic JVM arguments

    Posted Tue February 21, 2017 06:37 AM

    Hi All,

    We have a requirement in our project where we need to have multiple keystores and truststores under generic JVM arguments. Another approach would be to configure two new Dynamic Outbound SSL configurations, but there is an issue with dynamic outbound where the Pega application is not working if we use Dynamic outbound config and also we tried adding the properties under JVM custom properties which also failed.

    So, we have configured the key and trust stores of end point on the Generic JVM argument after consulting IBM PMR team. This approach worked fine. Now, we have a requirement where two applications deployed in the same JVM needs to invoke the same end point system but using the two different keystores and truststores.

    Can we configure two different key and trust stores as the generic JVM arguments in the same JVM? Currently, we are using the below JVM arguments for one application that is working..

     

    -Djavax.net.ssl.keyStore
    -Djavax.net.ssl.keyStorePassword
    -Djavax.net.ssl.keyStoreType
    -Djavax.net.ssl.trustStore
    -Djavax.net.ssl.trustStorePassword
    -Djavax.net.ssl.trustStoreType


    Please let me know if you need more information and suggest us on how to proceed further. Awaiting your response. Thanks in advance!!



  • 2.  RE: Adding Multiple Keystores and Truststores in Generic JVM arguments

    Posted Wed February 22, 2017 08:58 AM

    Why can't you use the same keystore with additional keys?