Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

document SSL certificate configuration #2

Open
mbjones opened this issue Aug 7, 2013 · 0 comments
Open

document SSL certificate configuration #2

mbjones opened this issue Aug 7, 2013 · 0 comments

Comments

@mbjones
Copy link
Member

mbjones commented Aug 7, 2013

When n2t.net changed its SSL certificate, it no longer became trusted by Java by default. To make the ezid library work, one has to configure java to recognize the new SSL certificate. We need to document this process in the library configuration. Greg Janée describes the issues from an email thread:

Anyway, I downloaded this Java client and found two problems. First, Java (even Java 7) does not recognize n2t.net's new SSL certificate, hence the "peer not authenticated" errors. To correct this, 1) download n2t.net's certificate, 2) create a local truststore and insert the certificate in the truststore, and 3) run the test again. To download n2t.net's certificate, follow the instructions in this message sent on the EZID list: http://listserv.ucop.edu/cgi-bin/wa.exe?A2=ind1307E&L=EZID-L&F=&S=&P=1524. To create a local truststore, I did this:

% keytool -import -file certificateFile.crt -keystore keystore.ks

To rerun Maven and recognize the new truststore, I did this:

% mvn -Djavax.net.ssl.trustStore=keystore.ks package

@mbjones mbjones modified the milestone: 1.0.0 Feb 14, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant