RE: Java app doing SSL to remote HTTPS server

Is WAS running on your 400 or somewhere else?  At what point in the process
do you get a "Certificate cannot be trusted error"?  Can you supply a stack
trace?  If WAS is running on the 400, I would not be surprised if all of
that stuff in the article you cite is replaced by DCM.  Can you download the
site's certificate in your browser and import into DCM and see if that fixes
it?  If so, you'll have to find out what DCM is not trusting the CA.

HTH,
Gary

-----Original Message-----
From: java400-l-bounces+garyp=firstech.com@xxxxxxxxxxxx 
[mailto:java400-l-bounces+garyp=firstech.com@xxxxxxxxxxxx] On 
Behalf Of Mike Cunningham
Sent: Wednesday, September 13, 2006 8:34 AM
To: Java Programming on and around the iSeries / AS400
Subject: Java app doing SSL to remote HTTPS server

We are working on our first java app running on WAS 6 that 
needs to talk to an application (WebCT to be specific) 
running on a windows server over HTTPS. We are using the URL 
class to do this and get a "Certificate cannot be trusted" 
error. Documentation we have found talks about using ikeyman 
in WAS to load a certificate into a trusted store. We have 
the ca.cer and cert.cer files for the certificate that was 
loaded on the Windows server. The rest of the documentation 
has us totally confused.
It says there should be an app in the IFS named ikeyman but 
we can't find it anywhere. We are not even sure if we need to 
load the windows servers certificate on the iSeries using DCM 
or ikeyman or if we need to load the iseries certificate on 
the windows server. below is the link where we are getting 
out information 
http://www-128.ibm.com/developerworks/websphere/techjournal/05
02_benantar/0502_benantar.html
 
Any help or reference to other documentation would be appreciated...
 
Mike Cunningham
CIO
Pennsylvania College of Technology
www.pct.edu
mcunning@xxxxxxx
--
This is the Java Programming on and around the iSeries / 
AS400 (JAVA400-L) mailing list To post a message email: 
JAVA400-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change 
list options,
visit: http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx Before posting, 
please take a moment to review the archives at 
http://archive.midrange.com/java400-l.