| LDAP over SSL keystore [message #665024] |
Tue, 12 April 2011 21:22  |
 Jan Fetyko
Messages: 28
Registered: April 2011 |
Junior Member |
|
|
Hello,
I'm turning to the forum with a problem we have with one of our bundles on virgo 2.1. It is an authentication bundle that validates users against ldap. The code uses a separate keystore where the LDAP's public key is stored. The code works perfectly in junit tests, but unfortunately in virgo 2.1 the keystore is not used for some reason. I could only get it working if I import the LDAP's public cert into the JRE's cacerts keystore. I even tried to put the public key into the $VIRGO/config/keystore, still no luck.
Imports:
import com.novell.ldap.LDAPConnection;
import com.novell.ldap.LDAPEntry;
import com.novell.ldap.LDAPException;
import com.novell.ldap.LDAPJSSESecureSocketFactory;
import com.novell.ldap.LDAPSearchResults;
Here is the code:
Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
System.setProperty("javax.net.ssl.trustStore", "keystore.jks");
LDAPConnection.setSocketFactory(new LDAPJSSESecureSocketFactory());
ldapConnection = new LDAPConnection();
ldapConnection.connect(host, 636);
ldapConnection.bind(V3, loginDN, password);
I got a reply from the mailing list, that I should try the -truststore option while starting virgo, but that still didn't help.
Is there anything different in virgo than in say servlet containers that would cause this issue ?
Thank you.
Jan
|
|
|
|
|
|
|
| Re: LDAP over SSL keystore [message #1021717 is a reply to message #1021413] |
Wed, 20 March 2013 15:10  |
Simon Zhu
Messages: 1
Registered: March 2013 |
Junior Member |
|
|
Jan,
I am having a similar problem of getting virgo finding the ldap certificate when using springframework to establish ldap ssl connection.
Basically what i did is to save certificate in jre/lib/security/jssecacerts and specify keystore,truststore,keystorepassword, and truststorepassword to the correct keystore in virgo bin/startup.sh script.
However, virgo fails to find the certificate, throwing exception "PKIX path validation failed, unable to find valid certification path to requested target".
Is there anything missing above?
I am using InstallCer for getting certificates, could that be a possiblity?
Thanks,
Simon
|
|
|
Powered by
FUDForum. Page generated in 0.03746 seconds
] 
Search
Help
Register
Login
Home
