StartTLS problem

[Peter Schober]

* Rastko Isajev <risajev at calliduscloud.com> [2013-03-01 11:52]:
> yes, it is quite clear for me the purpose of this cert. The only question
> is, should I added to that one custom JKS store and what is or where to
> find pass for it ?

This has nothing to do with the Shibboleth IdP. Again: The JVM (Java
Virtual Machine) the IdP software is running in needs to be able to
trust the LDAP server's certificate.
And Niko already provided you with the relative (to $JAVA_HOME) file
system path where you should add the certificate(s).
-peter