WSRP

WSRP producer with SSL does not work with non—SSL consumer. (#6292152)

Description:

WSRP producer with SSL does not work with non—SSL consumer. The common agent container requires the truststore to be populated with the SSL servers CA certificate into the truststore and the password of the truststore set.

Solution:

To set the truststore of the common agent container server:

1. Create a truststore and import the CA certificate of the SSL server on to this truststore using the keytool command.

2. Set the following JVM properties using the cacaoadm command:

   • Djavax.net.ssl.truststore

   • Djavax.net.ssl.truststorePassword

   For example, type cacaoadm set-param java-flags="`cacaoadm get-param java-flags -v` -Djavax.net.ssl.truststore=/tmp/truststore -Djavax.net.ssl.truststorePassword=truststorepass.

3. Restart the common agent container server.

The registry server keystore location is always relative to /soar/3.0. (#6355673)

Description:

The SSO configuration of the registry server accepts a keystore location. This location is always assumed to be relative to /soar/3.0.

Solution:

Make a directory /soar/3.0/jaxr-ebxml/security and place keystore.jks obtained from Registry Server.