Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Problem in implementing digital certificate with weblogic 6.1

Status
Not open for further replies.

alpeshpandya

Programmer
Dec 21, 2005
1
IN
HI

Thanks to all for view and reply on my problem. This problem is really urgent for me.

I m using verisign trial digital certificate for weblogic6.1.

I have mildd1150-key.der as private key

And mildd1150-cer.pem certificate from verisign

I have downloaded root-ca.cer from verisign and installed it to IE browser. I renamed that file to root_ca.pem (I tried with exporting from IE even) and using it as trustedCAfile name at weblogic admin console

At certificate chain file name I m giving file ca2.pem and it contains the same encrypted data as root_ca.pem

I need to enable “two way ssl enable” and “client certificate enforced” at weblogic6.1 admin console but as I enable “client certificate enforced” I m getting following exception

<Dec 21, 2005 4:30:34 PM IST> <Alert> <WebLogicServer> <Security configuration problem with certificate file root_ca.pem, java.lang.

Exception: Cannot require clients to have certificates without specifying a valid value for TrustedCAFileName>

java.lang.Exception: Cannot require clients to have certificates without specifying a valid value for TrustedCAFileName

at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:554)

at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:301)

at weblogic.t3.srvr.T3Srvr.initializeListenThreads(T3Srvr.java:1097)

at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:490)

at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:206)

At weblogic.Server.main(Server.java:35)

So what should be the valid value for TrustedCAFileName???

If I uncheck “client certificate enforced” from weblogic admin console then it works fine with my m/c and security dialogue box and lock symbol is also coming but from other server (other m/c) the client is able to access my m/c though I have uploaded digital certificate. Actually it should not.What would be the reason. Please help me this is very urgent.

Or how can I stop the client to access my m/c as my m/c is having digital certificate??? IS there any java code required???

Thanks
Alpesh
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top