LDAP SSL with it's own JKS on IDP?

[Peter Schober]

* Byte Flinger <byteflinger at gmail.com> [2013-10-15 14:43]:
> I tried using the "sslSocketFactory" on login.config to point to a JKS but
> that gives me some IO errors, also pointing to just the crt of the CA did
> not seem to work (Got certificate path errors even though I tried both with
> the client certificate and the CA certificate immediately under it).

What exactly did you try? The documentation says:

sslSocketFactory
  fully qualified class name which implements
  javax.net.ssl.SSLSocketFactory. Can also be used to configure SSL
  trust: {trustCertificates=file:/path/to/trust.pem

But from that I'm not sure about the exact syntax for this (broken
wiki formatting, I'm guessing).

http://code.google.com/p/vt-middleware/wiki/vtldapTLS#Trust/Authentication_Solutions
has this to offer (added quotes are my own):

  sslSocketFactory="{{trustCertificates=/tmp/certs.pem}}"

Maybe try this, where certs.pem contains all of your CA certs (root
cert and intermediates, if applicable), with and without the "file:"
scheme.
-peter