For using SSL with a webservice you do not have to set keystore in NB,
it is enough if your SSL certs are correct. That is the reason it is
disabled.
Make sure the certificate imported into keystore is actually a keypair.
It should show Privatekey entry and not trustedcertentry for the alias
servertest
Michele Antonecchia wrote:
> Please,
>
> can somebody help me ?
> It seems a glassfish issue.
>
> Thanks,
> Michele.
>
> Netbeans:
> Product Version: NetBeans IDE 6.5.1 (Build 200903060201)
> Java: 1.6.0_14; Java HotSpot(TM) Client VM 14.0-b16
> System: Windows XP version 5.1 running on x86; Cp1252; it_IT (nb)
>
> GlassFish ESB v2.1 (Released, June 2009) (Component Only -- with
> separate GlassFish 2.1 and NetBeans 6.5.1 installation)
>
> On Thu, Jul 16, 2009 at 1:21 PM, Michele
> Antonecchia<michele.antonecchia_at_gmail.com> wrote:
>
>> Hello,
>>
>> i need to to expose WS (OpenESB service) over HTTPS protocol with ad hoc SSL
>> certificate.
>> To do this I want to change s1as default certificate with my own.
>>
>> To insert new certificate into GF I have:
>> * created a test CS certificate and imported into
>> {$domain}/config/cacerts.jks with alias testca
>> * created my new certificate, signed by test CA, and imported into
>> {$domain}/config/keystore.jks with servertest alias.
>> * added jvm option to server
>> -Dcom.sun.enterprise.security.httpsOutboundKeyAlias=servertest
>> * restarted the server
>>
>> After that I could be deploying my app as a ESB Composite App.
>> I hit the little key on the SOAP BC in the CASA editor,
>> Hit "Server Configuration"
>> enable "Secure Service"
>> disable "Use development defaults"
>> but Keystore button is disable as you can
>> see from attached screenshot.
>>
>> I guess that is a GlassFish issue or I'm missing some configuration.
>>
>> thanks,
>> Michele.
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>
>
>