<div dir="ltr">It was able to find the files and load them just fine. With the crt I got certificate path errors, that usually happens if you have the wrong certificate but in my case they were correct. As for the IO errors with the JKS, it also loaded it just fine but I am guessing the class is not made to handle JKS file so it gave IO errors when it tried to parse it, or am I wrong here?</div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On 15 October 2013 14:49, Kevin P. Foote <span dir="ltr"><<a href="mailto:kpfoote@iup.edu" target="_blank">kpfoote@iup.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im"><br>
On Tue, 15 Oct 2013, Byte Flinger wrote:<br>
<br>
> I have read the Shibboleth IDP wiki page on how to configure ldap ssl using<br>
> java's own keystore and my tests worked fine that way using ldaps however I<br>
> would like to use my own separate keystore somewhere else in the disk.<br>
><br>
> I tried using the "sslSocketFactory" on login.config to point to a JKS but<br>
> that gives me some IO errors, also pointing to just the crt of the CA did<br>
> not seem to work (Got certificate path errors even though I tried both with<br>
> the client certificate and the CA certificate immediately under it).<br>
<br>
</div>Just a first thought..<br>
<br>
Is this a permissions issue.. can the id that the JVM is running under<br>
access the jks?<br>
<br>
------<br>
thanks<br>
kevin.foote<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br></div>