WAS v8.5 > Secure applications > Secure communications

Retrieving signers from a remote SSL port

To perform SSL communication with a server, WebSphere Application Server must retrieve a signer certificate from a secure remote SSL port during the handshake. After the signer certificate is retrieved, we can add the signer certificate to a keystore.

The keystore that is to contain the signer certificate must already exist.

Alternative Method: To retrieve a signer certificate from a port using wsadmin, use the retrieveSignerFromPort command of AdminTask.

Complete the following steps in the dmgr console:

1. Click Security > SSL certificate and key management > Manage endpoint security configurations > {Inbound | Outbound} > Key stores and certificates > keystore > Signer certificates > Retrieve from port.

2. Click Retrieve from port.

3. Type the host name of the machine on which the signer resides.

4. Type the port location on the host machine on which the signer resides. The port location is not limited to ports on WAS. The ports can include LDAP ports or ports on any server on which an SSL port is already configured, such as SIB_ENDPOINT_SECURE_ADDRESS.

5. Select an SSL configuration for the outbound connection from the list.

6. Type an alias name for the certificate.

7. Click Retrieve signer information. A message window displays information about the retrieved signer certificate, such as: the serial number, issued-to and issued-by identities, SHA hash, and expiration date. If a chained certificate is on the port, information about the root is displayed.

8. Click Apply. This action indicates that you accept the credentials of the signer.

Results

The signer certificate that is retrieved from the remote port is stored in the keystore.

An SSL configuration or client process that requires an SSL connection to the server can use the retrieved and approved signer certificate.

Subtopics

• Retrieve from port
  Use this page to retrieve a signer certificate from a remote SSL port. The system connects to the specified remote SSL host and port and receives the signer during the handshake using an SSL configuration.
• Retrieve from port
  Use this page to retrieve a signer certificate from a remote SSL port. The system connects to the specified remote SSL host and port and receives the signer during the handshake using an SSL configuration.

Related concepts:

SSL configurations
Dynamic outbound selection of Secure Sockets Layer configurations
Keystore configurations for SSL

Reference:

SignerCertificateCommands command group for AdminTask

+

Search Tips   |   Advanced Search