alpeshpandya
Programmer
HI
Thanks to all for view and reply on my problem. This problem is really urgent for me.
I m using verisign trial digital certificate for weblogic6.1.
I have mildd1150-key.der as private key
And mildd1150-cer.pem certificate from verisign
I have downloaded root-ca.cer from verisign and installed it to IE browser. I renamed that file to root_ca.pem (I tried with exporting from IE even) and using it as trustedCAfile name at weblogic admin console
At certificate chain file name I m giving file ca2.pem and it contains the same encrypted data as root_ca.pem
I need to enable “two way ssl enable” and “client certificate enforced” at weblogic6.1 admin console but as I enable “client certificate enforced” I m getting following exception
<Dec 21, 2005 4:30:34 PM IST> <Alert> <WebLogicServer> <Security configuration problem with certificate file root_ca.pem, java.lang.
Exception: Cannot require clients to have certificates without specifying a valid value for TrustedCAFileName>
java.lang.Exception: Cannot require clients to have certificates without specifying a valid value for TrustedCAFileName
at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:554)
at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:301)
at weblogic.t3.srvr.T3Srvr.initializeListenThreads(T3Srvr.java:1097)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:490)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:206)
At weblogic.Server.main(Server.java:35)
So what should be the valid value for TrustedCAFileName???
If I uncheck “client certificate enforced” from weblogic admin console then it works fine with my m/c and security dialogue box and lock symbol is also coming but from other server (other m/c) the client is able to access my m/c though I have uploaded digital certificate. Actually it should not.What would be the reason. Please help me this is very urgent.
Or how can I stop the client to access my m/c as my m/c is having digital certificate??? IS there any java code required???
Thanks
Alpesh
Thanks to all for view and reply on my problem. This problem is really urgent for me.
I m using verisign trial digital certificate for weblogic6.1.
I have mildd1150-key.der as private key
And mildd1150-cer.pem certificate from verisign
I have downloaded root-ca.cer from verisign and installed it to IE browser. I renamed that file to root_ca.pem (I tried with exporting from IE even) and using it as trustedCAfile name at weblogic admin console
At certificate chain file name I m giving file ca2.pem and it contains the same encrypted data as root_ca.pem
I need to enable “two way ssl enable” and “client certificate enforced” at weblogic6.1 admin console but as I enable “client certificate enforced” I m getting following exception
<Dec 21, 2005 4:30:34 PM IST> <Alert> <WebLogicServer> <Security configuration problem with certificate file root_ca.pem, java.lang.
Exception: Cannot require clients to have certificates without specifying a valid value for TrustedCAFileName>
java.lang.Exception: Cannot require clients to have certificates without specifying a valid value for TrustedCAFileName
at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:554)
at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:301)
at weblogic.t3.srvr.T3Srvr.initializeListenThreads(T3Srvr.java:1097)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:490)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:206)
At weblogic.Server.main(Server.java:35)
So what should be the valid value for TrustedCAFileName???
If I uncheck “client certificate enforced” from weblogic admin console then it works fine with my m/c and security dialogue box and lock symbol is also coming but from other server (other m/c) the client is able to access my m/c though I have uploaded digital certificate. Actually it should not.What would be the reason. Please help me this is very urgent.
Or how can I stop the client to access my m/c as my m/c is having digital certificate??? IS there any java code required???
Thanks
Alpesh