|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
![Reply to topic](templates/DAJ_Glass/images/lang_english/reply.gif) |
|
No X509TrustManager implementation, with self signed cert. |
« View previous topic :: View next topic » |
Author |
Message
|
ivansla |
Posted: Mon Dec 05, 2016 4:13 am Post subject: No X509TrustManager implementation, with self signed cert. |
|
|
Newbie
Joined: 18 Jul 2016 Posts: 5
|
Hi guys,
I'm having an issue with calling external Web Service. Communication is secured via TLSv1.2, I managed to download self signed certificate, and imported it to the IIB 10 truststore. However when I call specified service the IIB throws me this exception:
Code: |
javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No X509TrustManager implementation available
|
Could anybody give me some advice please? |
|
Back to top |
|
![](templates/DAJ_Glass/images/spacer.gif) |
fjb_saper |
Posted: Mon Dec 05, 2016 5:37 am Post subject: Re: No X509TrustManager implementation, with self signed cer |
|
|
![](images/avatars/gallery/misc/2.gif) Grand High Poobah
Joined: 18 Nov 2003 Posts: 20696 Location: LI,NY
|
ivansla wrote: |
Hi guys,
I'm having an issue with calling external Web Service. Communication is secured via TLSv1.2, I managed to download self signed certificate, and imported it to the IIB 10 truststore. However when I call specified service the IIB throws me this exception:
Code: |
javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No X509TrustManager implementation available
|
Could anybody give me some advice please? |
So you added the self signed cert to the truststore... What is the scope of your truststore ? integration server, integration node? ![](images/smiles/innocent.gif) _________________ MQ & Broker admin |
|
Back to top |
|
![](templates/DAJ_Glass/images/spacer.gif) |
ivansla |
Posted: Mon Dec 05, 2016 5:49 am Post subject: |
|
|
Newbie
Joined: 18 Jul 2016 Posts: 5
|
Hi fjb_saper, thanks for reply,
I set truststore to integration node scope using this command:
Code: |
mqsichangeproperties Brkr01 -o BrokerRegistry -n brokerTruststoreFile -v c:\Tools\Brkr01.jks
|
|
|
Back to top |
|
![](templates/DAJ_Glass/images/spacer.gif) |
fjb_saper |
Posted: Mon Dec 05, 2016 5:59 am Post subject: |
|
|
![](images/avatars/gallery/misc/2.gif) Grand High Poobah
Joined: 18 Nov 2003 Posts: 20696 Location: LI,NY
|
ivansla wrote: |
Hi fjb_saper, thanks for reply,
I set truststore to integration node scope using this command:
Code: |
mqsichangeproperties Brkr01 -o BrokerRegistry -n brokerTruststoreFile -v c:\Tools\Brkr01.jks
|
|
And you verified that the integration server actually uses that truststore when making the call?
You might want to start it with -Djavax.net.ssl.debug="true" or something like it. (Google it). ![](images/smiles/innocent.gif) _________________ MQ & Broker admin |
|
Back to top |
|
![](templates/DAJ_Glass/images/spacer.gif) |
|
|
![Reply to topic](templates/DAJ_Glass/images/lang_english/reply.gif) |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|