LDAP SSL with it's own JKS on IDP?

[Byte Flinger]

It was able to find the files and load them just fine. With the crt I got
certificate path errors, that usually happens if you have the wrong
certificate but in my case they were correct. As for the IO errors with the
JKS, it also loaded it just fine but I am guessing the class is not made to
handle JKS file so it gave IO errors when it tried to parse it, or am I
wrong here?


On 15 October 2013 14:49, Kevin P. Foote <kpfoote at iup.edu> wrote:

>
> On Tue, 15 Oct 2013, Byte Flinger wrote:
>
> > I have read the Shibboleth IDP wiki page on how to configure ldap ssl
> using
> > java's own keystore and my tests worked fine that way using ldaps
> however I
> > would like to use my own separate keystore somewhere else in the disk.
> >
> > I tried using the "sslSocketFactory" on login.config to point to a JKS
> but
> > that gives me some IO errors, also pointing to just the crt of the CA did
> > not seem to work (Got certificate path errors even though I tried both
> with
> > the client certificate and the CA certificate immediately under it).
>
> Just a first thought..
>
> Is this a permissions issue.. can the id that the JVM is running under
> access the jks?
>
> ------
> thanks
>   kevin.foote
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131015/55ead545/attachment.html