Link to home
Start Free TrialLog in
Avatar of sunilramu
sunilramu

asked on

How to use SSL between Appserver and SQL Server

How to use SSL or any other encryption (or any other security) between appserver(i use websphere) and sql server.(2000/2005)

thanks
Sunil
ASKER CERTIFIED SOLUTION
Avatar of dukestaTAI
dukestaTAI

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Mr_Lenehan
Mr_Lenehan

Look at this: https://www.experts-exchange.com/questions/21892626/SSLProtocolException-LDAP-password-change.html

It is reference to WebSphere/Active Directory but is similar in concept. The stages are:
> set up SSL on SQL Server
> import .cer from SQL Server onto websphere machine (by browsing https://yourserver/anyIISfile.html)
> install .cer to JVM using keylog
> restart websphere machine

The most important step is installing the certificate issued by the SQL server into the JVM, as Websphere will look to the JVM's trusted certificates.

Hope this helps.
Avatar of sunilramu

ASKER

Mr_Lenehan

Q_21892626.html you have reffered to seems to have been deleted. do you have any information regarding that. In the meanwhile i will try your solution.

thanks
Sunil
I am attempting to use the following Java to perform password change in active directory:
=======================================================
          //Some JAVA Ldap code which won't be relevant.
=======================================================

On the same server that I have Active Directory I have IIS, using IE browser on my WebSpehere server I exported the .cer issued by that IIS server.  I then added this to my java jre using keystore.

If I use the ldap url: "ldap://9.173.216.83:389" I get the error: "javax.net.ssl.SSLProtocolException: end of file".  

If I use "ldaps://9.173.216.83:389" or "ldaps://9.173.216.83:636" I get the error: "java.net.MalformedURLException: Not an LDAP URL: ldaps://9.173.216.83:636/DC=domain,DC=division,DC=company"

So my problems are above, what are the likely causes of this? When I change directory to %JAVA_HOME% I get directed to the java\bin in my WebSphere installation and not my regular jre (even though my code points to the JRE keystore).... could this have something to do with it... if so how do I fix it?

Any help or pointers would be greatly appreciated.
It was a question I posted and deleted, sorry. My problem was a network one and not coding/config. So long as you can get your websphere JVM to trust the SSL of you db server you should be laughing.