RE: Java app doing SSL to remote HTTPS server

Hmmm.  After reading a little in the WAS 6.1 for i5/OS InfoCenter, it seems
like DCM system keystores are deprecated in the current WAS release and you
do have to use the java utilities.

Gary 

-----Original Message-----
From: Gary L Peskin [mailto:garyp@xxxxxxxxxxxx] 
Sent: Wednesday, September 13, 2006 9:07 AM
To: 'Java Programming on and around the iSeries / AS400'
Subject: RE: Java app doing SSL to remote HTTPS server

Is WAS running on your 400 or somewhere else?  At what point 
in the process do you get a "Certificate cannot be trusted 
error"?  Can you supply a stack trace?  If WAS is running on 
the 400, I would not be surprised if all of that stuff in the 
article you cite is replaced by DCM.  Can you download the 
site's certificate in your browser and import into DCM and 
see if that fixes it?  If so, you'll have to find out what 
DCM is not trusting the CA.

HTH,
Gary

-----Original Message-----
From: java400-l-bounces+garyp=firstech.com@xxxxxxxxxxxx
[mailto:java400-l-bounces+garyp=firstech.com@xxxxxxxxxxxx] 

On Behalf 

Of Mike Cunningham
Sent: Wednesday, September 13, 2006 8:34 AM
To: Java Programming on and around the iSeries / AS400
Subject: Java app doing SSL to remote HTTPS server

We are working on our first java app running on WAS 6 that needs to 
talk to an application (WebCT to be specific) running on a windows 
server over HTTPS. We are using the URL class to do this and get a 
"Certificate cannot be trusted"
error. Documentation we have found talks about using 

ikeyman in WAS to 

load a certificate into a trusted store. We have the ca.cer and 
cert.cer files for the certificate that was loaded on the Windows 
server. The rest of the documentation has us totally confused.
It says there should be an app in the IFS named ikeyman but 

we can't 

find it anywhere. We are not even sure if we need to load 

the windows 

servers certificate on the iSeries using DCM or ikeyman or 

if we need 

to load the iseries certificate on the windows server. below is the 
link where we are getting out information
http://www-128.ibm.com/developerworks/websphere/techjournal/05
02_benantar/0502_benantar.html
 
Any help or reference to other documentation would be appreciated...
 
Mike Cunningham
CIO
Pennsylvania College of Technology
www.pct.edu
mcunning@xxxxxxx
--
This is the Java Programming on and around the iSeries / AS400 
(JAVA400-L) mailing list To post a message email:
JAVA400-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list 
options,
visit: http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx Before posting, 

please take a 

moment to review the archives at 
http://archive.midrange.com/java400-l.