LDAP SSL with it's own JKS on IDP?

[Kevin P. Foote]

On Tue, 15 Oct 2013, Byte Flinger wrote:

> I have read the Shibboleth IDP wiki page on how to configure ldap ssl using
> java's own keystore and my tests worked fine that way using ldaps however I
> would like to use my own separate keystore somewhere else in the disk.
>
> I tried using the "sslSocketFactory" on login.config to point to a JKS but
> that gives me some IO errors, also pointing to just the crt of the CA did
> not seem to work (Got certificate path errors even though I tried both with
> the client certificate and the CA certificate immediately under it).

Just a first thought..

Is this a permissions issue.. can the id that the JVM is running under
access the jks?

------
thanks
  kevin.foote