Certificate chaining error in Websphere

Question

I am trying to consume a RESTful service from url https://someurl.com. I have added the following properties in my code:

 Security.setProperty(\"ssl.SocketFa         


        

Answer 1

I'm assuming you have a web application, which is trying to access that restful service.

First, you should not set your stores via javax.net.ssl.* properties, but use SSL configurations provided in WebSphere. So comment all these setProperty() calls. Second, you have to add your service server certificate to the trust store.

Login to web admin console:

• Go to Security > SSL certificate and key management > Key stores and certificates > NodeDefaultTrustStore > Signer certificates
• Click Retrieve from port button, and specify hostname, 443 port, and Alias.
• Click Retrieve singer information button.
• Verify, if correct certificate is imported (parent).
• Save, and restart.

In some versions, the child certificate was imported (not the root), in that case, you will have to manually download the root certificate and intermediate (e.g. via browser, and import that one to the NodeDefaultTrustStore, but this time using Add button, not Retrieve..