Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Where does Websphere look for SSL certificates

I want to import a certificate into the Java truststore on websphere however I don't know where is the correct location to do so. The most obvious location to me is under

instance/was/INSTANCE1/java/jre/lib security 

however i see in my Administration console that the default truststore is under

/instance/was/INSTANCE1/profiles/base/config/cells/nd_cellname

Now i've tried adding to the first location under the jre security folder but to no avail. The problem with the location under the cell name is taht the truststore is a .p12 file and my certificate is a .cer file. How can i import? Thanks

like image 627
cdugga Avatar asked Nov 20 '13 16:11

cdugga


People also ask

Where does WebSphere store the certificates?

WebSphere® Application Server uses the certificates that reside in keystores to establish trust for a Secure Sockets Layer (SSL) connection.

How configure SSL certificate in IBM WebSphere?

Open the IBM® WebSphere® Application Server administrative console. Select Security > SSL certificate and key management. Select Key stores and certificates > NodeDefaultTrustStore. Select Personal certificates and click Import.

Where can I find SSL certificate?

To check an SSL certificate on any website, all you need to do is follow two simple steps. First, check if the URL of the website begins with HTTPS, where S indicates it has an SSL certificate. Second, click on the padlock icon on the address bar to check all the detailed information related to the certificate.

How does SSL work in WebSphere?

In the SSL basic authentication scheme, the server authenticates the client by challenging the client for a user ID and password or password phrase. For clients, you must create a key ring and attach to it the CA certificate from the certificate authority that issued the server's certificate.


1 Answers

You can import a certificate in Websphere in two ways:

  • Using the Admin Console (The most preferred way):

Go to Security > SSL certificate and key management > Key stores and certificates > CellDefaultTrustStore > Signer certificates > Add > Set the full path to certificate in File Name field).

You can also retrieve the certificate directly from the remote SSL port by using the "Retrieve from Port" choice.

  • Using the iKeyman X11 application which is in the WAS_ROOT/bin directory.

         ss

like image 104
trikelef Avatar answered Sep 28 '22 01:09

trikelef