My other post in this section deals with one of our two security layers. Its more complicated and will take time to figure out. This one deals with the basic SSL layer.

I have searched and not found an answer.

We would like to call a remote service via ssl. I have created a self signed cert in geronimo (there is a way to do this in the geronimo console) and imported this cert into my trusted cert store on the machine with the remote service. However, I still get errors. What else needs to happen in such a configuration?

it seems that part of the problem is that we are using 2 way ssl. So I need to have the remote server's cert and root certs in my trusted certs. This configuration can be changed in geronimo but for some reason the selection of a trusted store doesn't stick. I'm dumbfounded as to why it won't, but i'm fairly certain that this is the problem. Editing config.xml messes something up with the server and results in me having to reinstall it (unzip it and place the keystore back in the dir is all).

I'm not familiar with this part of Geronimo. Have tried the Geronimo mailing list?

I would love to find out what the answer is!

Thanks,
Pascal.

Ok, this has been solved.

The simple gist of it is where to put the certs.

The last place I looked was the ones stored in C:\Documents and Settings\ApplicationData which are the certs you can access through the java control center in windows control panel. Adding the trusted certs and CA's there let the connection work.

The little problem with geronimo not taking the configuration change on its admin page turned out to not be a problem.

Ok, this has been solved.

The simple gist of it is where to put the certs.

The last place I looked was the ones stored in C:\Documents and Settings\ApplicationData which are the certs you can access through the java control center in windows control panel. Adding the trusted certs and CA's there let the connection work.

The little problem with geronimo not taking the configuration change on its admin page turned out to not be a problem.

Thank you for the tip :).

I'm sure other will appreciate this (as much as I do appreciate it).

Pascal.