<< IBM Notes and Domino 9.0 Application Development Elective Exam is now available | Home | Terminology is the most important thing to know when when starting out with WebSphere Application Server >>

Trusting certificates in WebSphere Application Server

If you make SSL connections from a WebSphere Application Server based application the server (or rather the cell) needs to trust the certificate of the server you are connecting to. This is very easy to do in WAS and is easily done using the Integrated Solutions Console (ISC). The way to establish the trust is as follows:

  1. Log into the WebSphere Application Server Integrated Solutions Console (ISC)
  2. From the lefthand navigator select Security/SSL certificate and key management
  3. In the list of related items on the right click "Key stores and certificates"
  4. Click "CellDefaultTrustStore"
  5. In the list of "Additional properties" on the right click "Signer certificates"
  6. Click "Retrieve from port"
  7. Fill out the form with the hostname of the server and the SSL port (usually 443) of the you want WAS to trust. Also supply an alias to know the trust by in the list of trusted certificates.
  8. Click the "Retrieve signer information" button to validate the input and retrieve and trust the certificate
  9. Click OK and then save the changes to the master configuration.



Avatar: Albert Buendia

Re: Trusting certificates in WebSphere Application Server

Thanks for sharing Mikkel. Did you know if this works also for a wildcard certificate (*.youdomain.com) ?

 

Avatar: Mikkel Flindt Heisterberg

Re: Trusting certificates in WebSphere Application Server

 I cannot see why it wouldn't work for a wildcard cert as well.


Add a comment Send a TrackBack