MQSeries.net :: View topic

tez_i · Posted: Tue Sep 03, 2013 7:25 am Post subject:

Hi, I am new (obviously) to IIB9, but not to WMB in general. I am struggling to get a test connection to an external webservice working. This is what I have done:

1) copied the external company supplied cacerts.db.jks to c:\Temp
2) created an execution group specifically for interaction with this external WS
3) set the following configurable service properties for that execution group:

keystoreType='JKS'
keystoreFile='C:\Temp\cacerts.db.jks'
keystorePass='********'
truststoreType='JKS'
truststoreFile='C:\Temp\cacerts.db.jks'
truststorePass='********'

(Its only a test system, so I am deliberately using plaintext passwords for simplicity)

And:

httpNodesUseEmbeddedListener='false'
soapNodesUseEmbeddedListener='true'

4) deployed a message flow to the above execution group containing a SOAPRequest node, with the relevant WSDL properties set up. HTTP Transport properties as follows:

Web service URL: https://test.com/test (obviously anonymised!)
Protocol: TLS

- Have I missed something here?

When I attempt the connection, I get the following exception:

Text:CHARACTER:java.security.KeyStoreException: IBMKeyManager: Problem accessing key store java.security.PrivilegedActionException: java.io.FileNotFoundException: C:\Temp\cacerts.db.jks (Access is denied.)

Obviously, access denied, is the problem - I know.

So, I've checked - the file does exist, the file can be opened by ikeyman and the certificate is readable using the password supplied. The DataFlowEngine user has requsite filesystem permissions for the cert file.

Note: I've also checked the same message flow works to a dummy service, without SSL enabled. It also gets the expected authentication error when switched to the real connection, but without the keystore configured. And using SOAPUI, I can also get to the webservice, using the supplied jks file.

I am thinking this is a java security problem in accessing the keystore - but if that is the case the answer is beyond me.
Help would be appreciated.