users@glassfish.java.net

Re: Creating a keystore and truststore for a web service

From: <glassfish_at_javadesktop.org>
Date: Tue, 10 Mar 2009 09:40:51 PDT

Hi Again,

  Full stack trace please....
  
  From what i see, you have generated self-signed certs. In this case one step that is missing is that the client.crt should also be imported into server.jks

  But what is likely happening in the scenario you are trying is that the client/server has encrypted the message using the public-key of the other party. But when the message needs to be decrypted by the recipient of the message, somehow the keystore of the recipient only has a TrustedCertEntry and not a KeyEntry (private key is required for decryption).
[Message sent by forum member 'kumarjayanti' (kumarjayanti)]

http://forums.java.net/jive/thread.jspa?messageID=336135