ssl - no cipher suites in common on Liberty Websphere -
i'm trying set ssl on websphere-liberty server self-sigend ca, keep getting sslhandshakeexception. i'm no ssl expert, i'm forgetting something.
here details setup:
product = websphere application server 8.5.5.0 (wlp-1.0.3.20130510-0831) java.version = 1.7.0_51 os = windows 8 (6.2; amd64) (en_us) i managed deploy worklight application center war, , accessible via browser. when try access application center via https, following exception:
[9/1/14 19:07:11:799 eest] 00000021 com.ibm.ws.channel.ssl.internal.sslhandshakeerrortracker e cwwko0801e: unable initialize ssl connection. unauthorized access denied or security settings have expired. exception javax.net.ssl.sslhandshakeexception: no cipher suites in common i have following configuration in server.xml
<feature>ssl-1.0</feature> <keystore id="defaultkeystore" password="trasys" /> once add keystore property, websphere generates keystore file (key.jks) default certificate. removed certificate java keytool utility , added own self-signed ca certificate. certificate generated in cygwin using following openssl command (as indicated in following stackoverflow ticket: is signed ssl certificate required worklight development?):
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout privatekey.key -out certificate.crt to add certificate empty keystore used following command:
keytool -import -trustcacerts -alias mydomain -file certificate.crt -keystore keystore.jks so tried far, know i'm missing?
you import public certificate, not private key using procedure. need private key in keystore.
can use following solutions:
- convert key , certificate pkcs12 , import described here importing existing x509 certificate , private key in java keystore use in ssl
- create certificate using liberty tool
securityutility createsslcertificatedescribed securityutility command - if have full websphere application server can use ibm key management utility (ikeyman) create , import keys , certificates.
Comments
Post a Comment